Founder @ minimal. Making the safe path the fast path. Prev : @cmd_security → @elastic. https://xitter.cf/t.co/doA9INewhi
Vancouver, BC.
Joined May 2008
- Tweets2.3K
- Following2.5K
- Followers1.9K
- Likes5.9K
bots are cool. don’t let them be the only thing you use for platform security.
using them with deterministic detection tools and methods we’ve refined for the last 30 years is a good idea.
defense in depth
RE: @opencode drama — everyone needs at MINIMUM 1x always on agent scanning logs for weird activity starting today if you're not already doing this.
It's honestly a warfare out there and worse than ever before. I'm learning SO MUCH via my @bot security agent as he combs through @BetterStackHQ logs multiple times per day.
Similar to @DHH "we can fix everything", we can SECURE everything!
so anyway, here's two agents playing pong on 60 micro vm's running locally on my mac, in min.
github.com/gominimal/minimal
Jake retweeted
Every agent should have a secure supply chain with everything it needs, and the right amount of isolation to keep it on the rails.
No matter if it is running in herdr, github actions, tmux, or remote orchestrated runners.
And of course this should be done with Minimal.
i’ve been giving Rex a ton of love, but am I sleeping on herdr?
y’all want demos? herdr-min sandbox plugin? 👀
also, thanks for the continued love, here’s another 50 microvm’s to celebrate. 200 ⭐️
It ran all night super reliably too, I’ll do more long running workload tests for those inclined to run agents forever on their box.
Jake retweeted
We use the Nickel language to declare our pkg build specs. Reads like JSON but offers good type checking against our schema/DSL, boilerplate removal (using fcns) as well comments. Side-effect free too! (nice to know when building external pkgs)
e.g. github.com/gominimal/pkgs/bl…
who's making elite themes for herdr?
i like the session management, but i'd like this thing to look good while doin it.
i’ve been giving Rex a ton of love, but am I sleeping on herdr?
y’all want demos? herdr-min sandbox plugin? 👀
also, thanks for the continued love, here’s another 50 microvm’s to celebrate. 200 ⭐️
It ran all night super reliably too, I’ll do more long running workload tests for those inclined to run agents forever on their box.
So sick.
the newest frontier is agent swarms. watch us launch 700 sandboxes -- all connected to the same file system -- in 10s, then have them collaborate and build a city on that file system
i used sandboxes here, but if i used serverless tool calling? the total cost of this compute would be $0.28
the future is packing agents 40x tighter on each CPU and giving them access to the same shared file system context
focus on the shit you're passionate about, and you'll find your differentiator.
containment is table stakes now. we focus on attestation + speed.
every tool/dep is built from source and content addressed, so it's instantly available via cache you can verify. snapshots are a shit way to get an env running fast which is what everyone else is doing
you just declare what your agent needs, it's composed instantly. (Tools, secrets, files, etc)
thx for the min love!
we're working hard to make declarative env's fucking awesome.
github.com/gominimal/minimal
pr's always welcome.
Jake retweeted
In case it's not obvious to everyone at this point, individual developers are becoming the meta-lateral movement attack vector for attackers now.
Every few weeks there is a post on HN about an open-source developer being personally targeted to conduct a supply-chain attack through the software that they publish.
making this localhouse a localhome with min.
60 microvm isolated pi agents + python http servers launched + contained.
we're making the secure path the fast path.
github.com/gominimal
Jake retweeted
respect.
If we don't trust agents, why do we trust the environments they build in?
Containers aren't enough. Shared kernels aren't enough. Every piece of software will need real isolation.
we've built minimal to give every agent its own microVM on your machine. You decide exactly what it can touch.
Isolation should be the default.
rex.every got added today, so i made it part of my testing harness workflow for min pkgs.
every agent gets its own min sandbox, and reports back run results.
rex.every runs a Lua sentry that reads every pane each second and refocuses any agent that needs attention at a glance.
makes quick work of reviewing new package smoke tests!
Jake retweeted
This is great. We've added Minimal to our directory:
llmrelevance.com/tools/minim…
