vibehacker
News
GitHub Next (X) ·

GitHub Next's PDD Kit has you approve a formal spec, then proves agent-written Rust meets it

Announced Oct 21 as a research preview with Microsoft Research and built into GitHub Next's Chopin planner, PDD Kit turns your plan into a Verus spec for a human to sign off, then has the Verus verifier prove the agent's Rust code satisfies it for every input, falling back to tests and computer-use agents where a proof isn't possible. It's Rust-only for now, with a live demo at GitHub Universe on Oct 28–29 (Automater recap).

Read at x.com

More news

View all

Kiro IDE and CLI add opt-in memory for repo conventions, corrections, and ruled-out approaches

Launched Oct 20, Kiro's memory captures context that comes up while you work, like a test that only passes with a local service running, and stores it locally, scoped globally or per repo and shared between the IDE (1.4.0+) and CLI (2.29.0+, local V3 sessions). It's off by default: turn it on from the IDE's Memories view or /memories in the CLI, and note recalled memories add to context usage (CLI changelog)…

Kiro Blog

Alter launches on HN with a credential proxy that checks each agent call against the user it acts for

Launched Oct 21 (YC S25), Alter sits between shared internal agents and downstream APIs, keeping credentials in its vault and evaluating default deny, per parameter policies against the end user each request is made for, with approval for risky calls and audit logs. In proxy mode the token never reaches your agent process; the team also published an OpenClaw plugin (docs)…

Hacker News (Launch HN)

LayerFS 1.0 gives every coding agent its own writable workspace over shared, branchable history

Released Oct 21 as MIT source, LayerFS mounts a full workspace per agent without copying the base, commits each step into one SQLite store, and lets agents branch, rewind, or merge, refusing same file clashes unless a .lww rule says the newest edit wins. For now it runs through the dsh layerfs plugin for DeepSeek Harness, and the README warns the store has no crash or power loss durability (docs)…

GitHub (Ephemeral-AI-Lab/layerfs)

GitLab ships another CVSS 10.0 patch for a regex-compiler RCE reaching back to version 7.0

Released Oct 21, GitLab 19.5.1, 19.4.3, 19.3.6, 19.2.9 and backports down to 18.11.13 fix CVE 2026 110264, an integer overflow when compiling a crafted regular expression that could let an unauthenticated attacker run code on the server. It follows the Oct 12 CI/CD regex fix (CVE 2026 97229); GitLab.com is already patched, so self managed instances, including ones your agents or runners connect to, should upgrade now…

GitLab Docs

Corridor's Argos, a fine-tuned 9B model, picks security guidance for coding agents before they write code

Released Oct 21, corridor argos 1 is a Qwen3.5 9B fine tune that reads a coding agent's plan and returns the project specific security requirements that apply, such as which auth middleware or upload helper to use, feeding Corridor's Agent Steering. On Corridor's own SecReT benchmark it scored 0.655 micro F1, the best of 14 models tested, with the lowest mean time to first token at 740 ms…

Corridor Research

Spotted something we missed? Start a thread.