Hacker News (Show HN) · Nov 4, 2026 · 9:21 AM

Nomos is an Apache-2.0 Go harness that blocks coding agents from deleting tests or stubbing code to go green

Shown on HN Nov 3, the single 28MB binary sits between your repo and Claude Code, Cursor or OpenCode, locks main read-only with Git hooks, runs each task in its own worktree, and only merges after nomos verify passes 42 AST gates (deleted assertions, skipped tests, fake shims, leaked secrets) plus your own tests. It runs locally with no account or telemetry, and the maker says it's overkill for weekend prototypes.

Read at news.ycombinator.com

More news

View all

Droneship runs Claude Code or Codex in a gVisor cloud sandbox where the agent never sees your keys

Shown on HN Nov 4, droneship run claude clones your repo into its own sandbox with Python, Node and Go preinstalled, while a gateway outside it allowlists hosts and individual MCP tools and injects credentials into allowed calls, logging every file, command and tool call. It's free in early access for up to 5 sandboxes and 30 sandbox hours a month, with Copilot, Gemini and Cursor support listed as coming soon…

Droneship (Show HN) 42 minutes ago

Elpis v0.5.0 runs checked multi-agent Codex workflows on Linux, with you choosing what each agent sees

Shown on HN Nov 3, the open source Linux terminal and desktop harness built on Codex CLI lists every instruction file and memory with its token cost so you include or drop each one, and runs sequential, parallel, graph, recursive or voting workflows where each agent works in its own folder or Git worktree, gets checked, and a parent agent reviews the combined result before it lands. There are no macOS or Windows builds, and outside Git the folder boundaries are only instructions…

GitHub (MasihMoafi/Elpis) 3 hours ago

Readfirst keeps a repo map of team rules your coding agents read before they edit a file

Shown on HN Nov 4 under MIT, npx readfirst read <file prints the rules, risks, checks, tests and callers stored in a committed .readfirst/map.json , and init agent wires it into Claude Code, Cursor, Codex or Gemini via a hook, MCP or rules, with no server, account or model calls. A verify command runs the checks for everything your branch changed (Show HN)…

GitHub (jeonghun917/readfirst) 4 hours ago

Mallard is a free, MIT app that pushes and pulls Claude Code and Codex sessions like Git commits

Shown on HN Nov 3, the macOS and Windows app lets you pick sessions, push them to a folder, Dropbox, Cloudflare R2 or optional Mallard Cloud, and have a teammate or your other laptop pull and resume them with the original context, mapped to the Git commits they produced. Storage only needs list, put and get, credentials stay local, and there's an optional key redaction setting (Show HN)…

Mallard (Show HN) 5 hours ago

Confetti (YC F26) turns plain-English prompts into CAD, parts lists and firmware for hardware projects

Shown on HN Nov 3, you describe an object or attach an image, approve a build brief, and agents deliver STEP or STL files, editable CAD, a parts plan, build instructions and firmware for supported electronics, with quotes and print farm ordering for supported 3D prints. It uses plans and AI credits, and custom PCB design isn't supported (Show HN)…

Confetti (Show HN) 6 hours ago

Spotted something we missed? Start a thread.