brian_kuan

7 ms·

1.
by brian_kuan 2mo ago
Yep, exactly right - the publishing mechanism is the anchor schedule. Regarding incentives, this only works if the customer (or regulation) demands it - they’ll require the checkpoints as a condition of closing the deal - and is part of the
2.
by brian_kuan 2mo ago
Very cool! Heard on all of that - IMO you didn’t remove the witness, but instead distributed it so that every customer becomes their own witness. The catch is pre-committing catches declared-but-missing, but not the thing nobody put on the
3.
by brian_kuan 2mo ago
Proxies are blind to sensitive things enterprises might worry about (eg. the agent read a database, wrote a file, sent an email, etc) as those happen in the agent's own code. That said, if you already run a gateway, its logs can be ing
4.
by brian_kuan 2mo ago
BTW I've added an example to the README, same setup I run on my own machine: https://github.com/bkuan001/halo-record#record-your-coding-a...
5.
by brian_kuan 2mo ago
Yes to both!
6.
by brian_kuan 2mo ago
Sending you an email now!
7.
by brian_kuan 2mo ago
Because they live in infrastructure the vendor itself controls - there's some conflict of interest there. Things like retention, rotation, deletion, what gets included/excluded, etc are all decisions the vendor makes. Same reason
8.
by brian_kuan 2mo ago
Fair point - I am a marketer by training and built this with some help from Claude! But appreciate the love. If you find something/have feedback, please let me know and I'll gladly fix it. Separately - 100% agree on the witness -
9.
by brian_kuan 2mo ago
There's no interception - it runs in-process, so it works with any Python code (with or without a framework). There's a TS version too if your stack is in JS. Would love to hear more about your agent framework!
10.
by brian_kuan 2mo ago
PS: please try to break it - if you find that the report does not catch a deleted line, changed number, or modified record, I'd love to know! And to start a discussion: if you sell or buy AI agent products, what do security reviews ask
11.
Show HN: Halo – open-source, tamper-evident runtime evidence for AI agents(github.com)
37 points by brian_kuan 2mo ago|23 comments
12.
by brian_kuan 1y ago
This is awesome, thanks for sharing! Loved their take on building competitive moats