tptacek13 hours ago
The thing about things like this is that they're shop jigs. You can buy a crosscut sled if you really want to, but most woodworkers just make their own.
It was a different situation 2 years ago, when there was significant cost to building your own harness (but then: you probably weren't doing AI vuln research 2 years ago). Today, I think your best bet is to look at something like this for ideas, and then just ask for your own, to fit your own work style, with your own interface, your own notion of target and effort specification, and your own alerting.
redfloatplane12 hours ago
"Shop jigs" is a great way to put it. I think a lot of software has gone from being made for general use to extremely individualised use. Before the Age of AI, it took so much human effort to write something that solved your problem that you might often go the extra mile so that others could re-use it. Now, it takes almost no effort, so the software stays ungeneralised. Some of the incentive has changed, I think. Most of the time I no longer share the things I've been building[0] because, for one thing they simply couldn't possibly have any benefit for others, and if they need something like it, they can build exactly the thing they want instead of having to extend or modify my thing. Like a jig!
0: https://redfloatplane.lol/blog/17-why-share/ (and related posts, I guess)
colmmacc11 hours ago
Unless it is very specific to a proprietary product, craftspeople take their jigs with them from job to job, building up a personal library over a career. As a software developer I've always had a well-tuned IDE and shell config in a safe place.
Something I think about a lot is what is the equivalent for the software builders of today using AI tools? how do make these harnesses exportable and portable? You might think employers would be against this; make it more costly to leave. But I actually think most will favor this because it makes people more productive more quickly. But we have to find ways to normalize it and show that there are no security leaks in the process (like might make it in to a set of personal steering prompts).
tptacek10 hours ago
Just nerding out here, not rebutting, but when you say "craftspeople take their jigs with them from job to job" --- sort of. Sometimes. I think if you put a woodworker in a position where they obliged to build a new miter sled or assembly table, they might actually be thrilled. You make a tool, you use it for awhile, you build up a mental list of things you'd like to improve about it, that you'd do differently if you got a do-over; now you have an excuse to do it.
happyopossum9 hours ago
This, for like 37 things in my workshop right now.
aquajet11 hours ago
Using something like pi helps. I've made my own dotfiles for skills/extensions I like and can install them just like my normal dotfiles
djfergus6 hours ago
"Humor When you finish a job — completing a task, answering a question, fixing a bug, shipping a feature — end your final message with one short funny line. A quip, a dad joke, a wry observation, a playful self-roast. One line. No emoji spam. Make it land, then shut up."
whats the purpose of this? just fun or does it cause some desired behaviour?
ClikeX2 hours ago
> does it cause some desired behaviour?
Fun is desirable.
agravier10 hours ago
I've imported and adapted my personal agentic dev framework to my team relatively successfully (as I've kept it relatively harness independent), but it requires actually owning it, vibed or bloated or conceptually inconsistent stuff bite a lot when porting things over.
worldsayshi11 hours ago
> craftspeople take their jigs with them from job to job
Except for software gigs the software typically belongs to the customer so you'd need to rewrite it every time...
ClikeX2 hours ago
Depends. With all the web agencies I've made, the only code that belonged to customers was the actual website part. Any of the "jigs" that we made for our workflow was not part of that.
And contractually, any code I made was my employer's if I made it during office hours. Some even made a claim for code I would've written that during my employ that would be "competitive". Luckily, there was a massive difference in what I would do in my own time versus what they did.
borski11 hours ago
Depends. If you are a contractor, like most craftspeople, your tools are your own.
ninjalanternshk10 hours ago
My contracts always state I own tools created or byproducts of the work that don't end up in the work.
jaxn11 hours ago
i have been thinking about this from a different direction: how do we make these shared within a company in a way that increases the productivity floor of the team/department/company. Sure, they can still be extended/enhanced by individuals, but we don’t need everyone configuring mcps, building institutional memory, etc.
for me, it’s not about the cost to leave, it’s about lowering the cost of onboarding and change.
beezlewax4 hours ago
No effort? You are really drinking the AI marketing soup with that one.
"It takes less effort for some parts of the software development life cycle" would be more correct.
andhug12 hours ago
That’s an interesting way to say “code quality in the age of ai has gone out the window”
drtz12 hours ago
Are you suggesting that performing a specific task without unnecessary abstractions is indicative of poor quality?
jorl1711 hours ago
This is exactly it.
I've said many times that I believe "using the computer will transparently involve having it write and run code for you" (and if you're not technical you won't even know it!). What you're saying goes in that direction as well.
I feel that it's often better for us to create purpose-built tools for our lives, and with every model release, the complexity of those tools grows.
These are really personal tools: they solve a problem that other people might have, but are very tied to your own specific way of working, and would be hard to explain or adapt to someone else. So: shop jigs.
I have about 10 custom scripts and programs that are like this -- I haven't felt like this since college! Back then I had all the time in the world to customize my setup...now I have agents!
In a way, I want to show this to all my friends, but whenever I mentally trace how that would go, I realize they wouldn't really understand a bunch of the quirks they have, because they are _my_ quirks. They're reasonably complex pieces of tech that solve my problems very well, which are themselves particular versions of broader problems, and which I (at least for now) have no interest in supporting.
It's so clear we're heading in this direction, and yet so many people still believe code will be for the elites. Maybe production-code...As for the rest, I think soon your mom and dad are going to have their computer running code it wrote to serve them. Security-wise it's scary, but it's exciting to think about!
nbardy3 hours ago
In general this is the way I see open source going.
We won't reuse open source libraries as libraries we import, but as design inspiration for the bespoke tools we make.
It's too cheap to make your own stuff and too expensive to be stuck with someone else primitives.
But grounding AI Coding in existing tools is incredibly powerful.
ashdksnndck6 hours ago
Sure it’s possible for anyone to build a harness if they had the inclination, but most people don’t have the inclination to do that.
And even if you did… I spent months refining AI workflows that were just obsoleted by ultracode.
Npovview4 hours ago
Just as Python is batteries included language, we similarly need batteries included harnesses as well. This is what I don't like minimalism setups like Pi.
hsaliak9 hours ago
I’ve been looking for a way to articulate this shift, and your analogy nails it. The value of libraries and infrastructure components in software engineering is eroding fast.
I am sure that in many organizations, teams responsible for this sort of work have less and less users coming to them.
tptacek8 hours ago
Maybe for developer tooling, but on the consumer app side I think it's the opposite: MusicKit is much more valuable than Music.app now, because Claude can one-shot most reasonable things you could ask it to do. I think there's actually more value in ambitious libraries than there was 5 years ago, when any serious use of a library entailed a minimum 5-figure investment of time.
flir6 hours ago
I had a pleasant experience one-shotting a dashboard on top of a library designed for building dashboards. Because everything was abstracted away, the chatbot had relatively few places it could get into the weeds. If I'd asked for the same thing from scratch, I think the result would have been more inconsistent, and would have had more bugs.
So I can definitely see the value in a library for constraining the chatbot to some well-worn paths.
borski11 hours ago
I agree with this wholeheartedly.
sieabahlpark13 hours ago
[dead]
zuzululu13 hours ago
[flagged]
ryancw13 hours ago
As a woodworker, it’s a really nice analogy and beyond anything I’ve seen AI do.
zuzululu12 hours ago
No idea why people are so upset I genuinely thought his references using analogy was a typical AI slop comment that I'm used to seeing from chatgpt
Retr0id12 hours ago
Believe it or not, people have been making analogies since before AI
timacles11 hours ago
They used to, they still do, but they used to too.
zuzululu11 hours ago
I believe you and you can also believe AI is pretty good at it too.
[deleted]11 hours agocollapsed
[deleted]13 hours agocollapsed
ghhhibhc13 hours ago
It really doesn’t
zuzululu13 hours ago
[flagged]
sermah13 hours ago
user: zuzululu
created: 47 days ago
karma: 228`
simonw14 hours ago
I wonder how much this thing costs to run.
https://github.com/anthropics/defending-code-reference-harne... says:
> As a rough guideline, expect ~10K uncached input tokens/min and ~2K output tokens/min per agent. You can scale parallelism up to your account's ITPM limit (roughly 10 agents per 100K ITPM).
My guess would be hundreds of dollars with Opus and thousands of dollars with Mythos.
nikcub13 hours ago
It's becoming apparent that it requires more tokens to secure code than it does to write it
May even be an order of magnitude more
Mtinie13 hours ago
In all seriousness, wasn’t that always the case? Writing bad code is relatively cheap.
Ensuring code isn’t bad is the expensive part.
chrisweekly11 hours ago
Sort of?
The definition of "bad" from a security PoV is rapidly expanding, in light of relatively new capabilities and increasingly cheap access to exploitable vulnerabilities.
fny10 hours ago
I don't think the definition of "bad" is expanding. Rather the ability to detect and exploit "bad" is.
chrisweekly7 hours ago
fair point. another way of putting it might be to say that, for all extant software, much more of it is "bad" than we realized even a month or two ago -- and the cost to create and maintain "good" software is increasing (even as the naive / surface-level / apparent cost is plummeting)
kenjackson6 hours ago
Same thing happened with the growth of the internet. There was a time when there was basically no consideration of buffer overflow.
tptacek13 hours ago
For now, maybe, yes? But the most important targets of this kind of work aren't AI outputs; it's legacy code, particularly (but not exclusively) old memory-unsafe code. In those situations the figure of merit isn't the token cost of recreating the target code; it's the cost of finding the same bugs with humans or preexisting tools.
Those costs can be extremely high.
thisogood12 hours ago
[dead]
ath3nd13 hours ago
Any newly produced AI code is immediately legacy and trash at the same time.
andai4 hours ago
There's a parallel between looking for bugs and mining. As models get smarter, they'll find "deeper bugs".
I expect at some point formal verification will become more economical than red teaming. Writing it correctly is more expensive, but it may be cheaper than trying to secure incorrect software.
(Or rather, as hacking incorrect software becomes vastly cheaper, the amount of software worth writing properly will increase.)
I've been thinking, by Dijkstra's standards we have already been vibe coding for almost a century :)
sam-cop-vimes2 hours ago
Are AI firms going to charge us to write code, and then charge us even more to secure it?!
smt882 hours ago
Yes, obviously. Infosec has always been plagued by this. How many services make you pay for SSO?
windexh8er12 hours ago
Given the slop that's made its way to Github we can see that this is a great profit model. Ship slop and then "fix" slop. What an efficient use of our planet!
bflesch13 hours ago
It's weird because why can't they train the AI to simply output secure code?
The basic security flaws with regards to input validation and overflows should never ever be output by an AI. For "security flaws due to bad design" I'll cut them slack until AGI is achieved.
simonw13 hours ago
> It's weird because why can't they train the AI to simply output secure code?
The most interesting security bugs have causes that are spread across large codebases, or networks of dependencies.
Training the AI to "output secure code" won't work if it doesn't also have access to the source code of every dependency that it's using... and even then, given current model speeds and prices most developers won't want to wait for an hour on every edit they make while the LLM reasons through all of the dependencies.
[deleted]5 hours agocollapsed
tptacek12 hours ago
What's destabilizing the industry right now isn't vulnerabilities AI introduces into new code; it's a flood of sev:hi vulnerabilities in existing code, not introduced by AI but discovered by it.
chrisweekly11 hours ago
Agreed -- and, compounding the challenge, the flood of _reported_ high-sev CVEs is itself a kind of DDoS attack on maintainers.
bflesch36 minutes ago
Even before that everybody was getting drowned in shitty reports from automated tools.
The goal of AI-generated code should not be that one needs a AI-based security review tool on top of it, but that the AI-generated code in itself is reasonably secure.
iammrpayments3 hours ago
Hello Sam
bobkb12 hours ago
I think these audit tools can look beyond just security and can look for compliance audits as well. The ability to audit real targets in staging environments makes it easy to identify issues.
niros_valtos9 hours ago
I think that the cost of Opus is already prohibitively expensive, so not sure how that would compare to Mythos. Check this calculator- it shows that a company with 100 devs can hit ~2.5M cost on tokens annually, which is wild! https://ai-cost-calculator.arnica.io
pixl979 hours ago
It's wild, but how many FLOPs in computation is occurring in those 2.5M in tokens doing? Might not sound quite as wild using that metric.
binyuop12 hours ago
Claude workflows in ultra code mode works in a very similar fashion and it consumes a moderate amount of the session usage limit, depending on the complexity of the task. With the API it would probably get expensive quickly though
eranation9 hours ago
We actually created a calculator to estimate scanning costs (including whether you do this continuously or not) https://ai-cost-calculator.arnica.io
It's an estimate, so it might be wrong, but it gives the ballpark based on our experience. Happy to hear everyone's feedback.
Terretta12 hours ago
If you compare to their managed service, that estimate is likely 1/10th expectation, depending on codebase.
But even this larger number, in turn, can be about 1/10th the cost of a formal engagement to discover the type of findings it seems to be going for: things that do not show up from PR reviews or even /security-review without the pre-work steps in the open-source framework guided by an expert. That's not counting the time and delay to figure out how to do that engagement.
Bluntly: if it matters, while this is a month's vibing budget for a single scan, it is also "pennies on the dollar" dirt cheap.
At the same time, its findings still need an expert. Its suggestions may be helpful, they may be actively harmful, depends on the prework quality.
Recommendation to IT department heads: spend a couple grand on this, use the scare page to rustle up the budget to build a relationship with a red team that can find, triage, help remediate if needed, and train your in-house team to be "security minded".
mmaney138 hours ago
Just another example of an overextension of technology in a scenario where applying a proper harness would suffice.
Reminiscent of the early days of tax automation where importing a W2 cost hundreds of dollars until people realized typing in 6 boxes worth of data was easy and paying the automation fee ate up their entire tax return.
Analemma_14 hours ago
I mean, you don't need to run it all the time, right? You do it once over your entire existing codebase to start and then once over the diff in your CI/CD pipeline when you make a new change. I'm sure it's not literally that simple but I doubt these need to churn 24/7/365 either.
xerxes24913 hours ago
In the Mythos blogpost they revealed to run the model like a 1000 times on the same code-base maybe with slightly different prompt or temperature. That suggests it will just be pay to win. If the 'attacker' spends more money/tokens than the 'defender' you will eventually be outclassed.
sofixa12 hours ago
It's even worse, it's loot box style. Not pay to win, but pay to have the chance to win. The result will always be non-deterministic, so for some cases it can give you what you're looking for from the first time, or it can take 1000 tries.
beering11 hours ago
It’s never not been “loot box style”. None of your past hired security audits were guaranteed to catch all issues?
vb-844813 hours ago
You are supposed to run it on full codebase before any single PR gets merge.
jazz9k13 hours ago
Companies don't make production pushes yearly. For many, it's two week sprints..and that's one project.
This doesn't make any sense cost-wise. It would be cheaper to just hire a security engineer.
kolesnikov-arch3 hours ago
[flagged]
dclavijo12 hours ago
Sligthly off topic: it seems that someone is in a dead/flag rampage killing all good links to Github in this post, why?
baby10 hours ago
Our experience has been that without a good harness you don't really get much out of codex/claude. And you really need to spend time and energy figuring out why coding agents can't find bugs like you can.
Every week I see bugs (as an auditor) that our own harness (https://zkao.io/) can't find, and we have to figure out pretty interesting techniques in order to make the tool find them. Mind you I'm talking mostly about cryptographic vulnerabilities, not just webapp bugs. So IMO it's going to make a lot of sense for companies to have both their own harness (as tptacek is talking about) and pay for services that focus on making a good harness from experience (and audit firms are going to be the best at doing this, as they see a lot of bugs and can spend time "teaching" their harness about these bugs)
On the other hand, you have to find equally as good techniques to triage, because otherwise you just have some machinery that I call "vibe auditing" that just produces enough false positives to tire all the developers (who are already overwhelmed with crappy AI submissions in bugbounties and other AI tool that review all of their PRs).
At the end of the day, when your harness doesn't return any bug, you're left wondering "does it mean there's no bugs?" We're basically back in this reputation game, where you want to use the best tool, or the best team (that knows what the best tools are), and need to figure out which one is.
lanyard-textile14 hours ago
>This repo is not maintained and is not accepting contributions.
Hm :)
Hamuko13 hours ago
Why isn't Claude maintaining it?
politelemon4 hours ago
They must have solved coding that well.
skeledrew13 hours ago
They pretty much saying the efficacy of the tool can be tested by anyone to determine if it's worth purchasing the more polished and up-to-date commercial offering.
spacebacon13 hours ago
[flagged]
richardbarosky13 hours ago
To be sure, security is an amazing AI/LLM use case. A huge swath of the work is pattern matching known security issues against stuff that's very precise to analyze -- programming language text.
Something that stands out is that for the strongest use cases, AI companies will prefer to sell the technique as a service rather than its raw output. For use cases where the output is less valuable, tokens are sold. If AI tokens were so magical in creating new value in developing software applications generally, they wouldn't be selling tokens directly. They'd hoard the tokens are use them to dominate SaaS software in any industry they want.
The same way as someone selling an expensive course in the stock market is signaling that they have more to gain by selling the course rather than taking their knowledge and making money in the stock market directly.
dgellow13 hours ago
> The same way as someone selling an expensive course in the stock market is signaling that they have more to gain by selling the course rather than
Or they want to diversify
> If AI tokens were so magical in creating new value in developing software applications generally, they wouldn't be selling tokens directly.
That requires to build and sell a whole product they have little experience with, competing with their own customers. Not a great place for an AI vendor still trying to establish itself. It’s a lot of distraction, when you already have a lot to deal with the existing business. And strategically not too valuable
kenjackson6 hours ago
What market is hotter than AI models? Do you think their energy would be better making games or image editing software?
dgellow4 hours ago
No, I’m saying the opposite
Kiro13 hours ago
> They'd hoard the tokens are use them to dominate SaaS software in any industry they want.
I don't understand this argument. I've ran and sold a semi-successful SaaS. The exhausting and frustrating parts are all the things an LLM cannot help you with. Coding the product is not the bottleneck or what grants you success.
zuzululu13 hours ago
Good point but I do think LLM helps with those frustrating parts while not being able to outright solve them.
richardbarosky13 hours ago
> Coding the product is not the bottleneck or what grants you success.
Agree, and I think that's the core of my point.
Not that it's irrational or doesn't make sense to sell tokens for purposes of software dev, but that if tokens were a true game changer for success in software dev, they wouldn't be leading with token sales, the same way they're not leading with token sales for security stuff -- it's more like "Contact Sales".
hyperpape13 hours ago
> If AI tokens were so magical in creating new value in developing software applications generally, they wouldn't be selling tokens directly. They'd hoard the tokens are use them to dominate SaaS software in any industry they want.
This doesn't follow at all. Anthropic's revenue is growing 10x year over year selling tokens. Their tokens can be super magical, let them enter established industries and displace incumbents, and get 100% annual growth in those industries, and they would still be better off prioritizing selling tokens, because it's a great business.
What your argument shows is that there are limits. Their tokens are not quite powerful enough to make infinite money instantly in every area of software. Admittedly, that does seem true.
morpheos13711 hours ago
kind of funny tokens don't prompt and steer themselves. it almost as if the value still lies with the human holding the tool.
skybrian13 hours ago
Maybe, but an alternative argument that building an ecosystem is more valuable in the long run.
We started out with many companies forbidding their employees to use remote LLMs on their source code because of security concerns. Now many companies are starting to believe that they must analyze their all their source code with remote LLMs because of security concerns. When trusting Anthropic becomes normalized, that means they can sell more services that require access to the source code.
Melatonic13 hours ago
Surprised we havent gotten an integrated "MetaSploit" AI update where it calls and messages a ton of people in a company and once it starts to find someone possibly vulnerable lets a human red teamer take over or guide it more by hand.
therealdrag010 hours ago
Isn’t this analogous to saying if farming equipment is so productive why doesn’t John Deer hoard all the tractors and do the farming themselves?
derf_12 hours ago
> If AI tokens were so magical in creating new value in developing software applications generally, they wouldn't be selling tokens directly.
If hardware were so magical in creating new value generally, TSMC would be designing the chips instead of selling fabrication as a service.
That is what US chip companies used to do, by the way (back when there was silicon in Silicon Valley, before they got their lunch eaten by Taiwan). If TSMC had to design all of the chips they fabricate now, they would be doing a lot less business. Conversely, if any other company that wanted to design a chip had to build their own cutting-edge fab first, NVIDIA would not exist.
energy12313 hours ago
They can only do that if they're a monopoly, which they're not
DrewADesign13 hours ago
> They can only do that if they're a monopoly, which they're not
Why do you say that? I reckon lots and lots of companies sell software that aren’t monopolies. Having competition, even stiff competition, isn’t anathema to running a business.
energy12313 hours ago
You said "They wouldn't be selling tokens directly ... They'd hoard them"
But they can't do that because they aren't monopolies.
DrewADesign11 hours ago
> You said
Just to clarify, I’m not the person you initially replied to.
> "They wouldn't be selling tokens directly ... They'd hoard them" But they can't do that because they aren't monopolies.
Hoarding them— not selling any of them, but instead using them internally and selling the products created by them — doesn’t at all seem like it would require a monopoly.
majicDave11 hours ago
It will always be easier to find a single hole than it will be to seal every one. The hackers have all the same tools, so this is an arms race that cannot be won.
napoleond11 hours ago
It seems clear that LLMs significantly change threat model math, but this observation alone does not explain how or why; the asymmetry that you’re describing is a property of pre-LLM software as well.
DrewADesign9 hours ago
Same ratio of imbalance, just with matching multipliers distributed to each side, and everybody is probably worse off because of it: I cite post-LLM-ATS hiring/job hunting.
lateral_cloud11 hours ago
Defenders have context that attackers don't though.
LazyR3nR3nan hour ago
This is a good addition tool for people are in the security Practitioners. To save time for hunting vulnerability.
sciencejerk5 hours ago
This isn't as useful as it sounds, unless we know that Claude efficiently spends tokens using this harness
bobkb12 hours ago
Very interesting.
I have working on and using a similar tool for a while now :
https://github.com/bobinson/vulture
I have been struggling with false positives and using Claude + MCP as a poor man’s audit tool. As of last few days found better result with nvidia hosted models.
cpard9 hours ago
It’s clear that Anthropic is building harnesses for specific use cases now and turns them into products.
This is the equivalent of Claude Design but for security.
Different harness, different packaging and obviously different distribution because the persona is different.
It’s funny because from all the posts I’ve read from companies reporting on Mythos, everyone is building their own harness for it.
Cisco even published a specification for one.
But Anthropic is the one who has figured out how to package and distribute this. Great GTM!
ElijahLynn9 hours ago
This post is misleading and so is the GitHub org. Anthropics vs Anthropic.
Zetaphor5 hours ago
That is their actual account. We have this discussion every time they post something sadly
madduci6 hours ago
"This repo is not maintained and is not accepting contributions."
Nice
ElijahLynn9 hours ago
Anthropics vs Anthropic.
That repo is Anthropics.
This post title should clarify that it is not Anthropic (no "s").
olcay_9 hours ago
Anthropics is Anthropic's user name on GitHub
edot8 hours ago
Anthropic, no s, is owned by some Australian guy.
sumedh41 minutes ago
I wonder if he is using Anthropic's claude code to work on his Anthropic Github account.
gulbanana9 hours ago
`anthropics` is Anthropic's GitHub username.
SubiculumCode8 hours ago
The last time this Anthropic GitHub got posted I made a similar comment.
newaccount1234411 hours ago
Let's see how better it is in comparison to ZAP and Burp. I will test on https://github.com/SasanLabs/VulnerableApp which i built under SasanLabs
[deleted]13 hours agocollapsed
bigmattystyles14 hours ago
I wonder how this sort of product is going over at Coverity and others like it. Proper SAST vendors I mean. Is it an existential threat?
rms2ds12 hours ago
If I had to guess, they'l eventually just add it into their own product and hike the prices up to cover tokens lol.
trilogic14 hours ago
https://github.com/Mainframework/Anthropic-Cybersecurity-Ski...
Be aware: the .py/s will not pass the antivirus but basically they do the job.
eranation9 hours ago
If anyone wonders how much it can cost to run scans like this on your entire codebase with SOTA models: https://ai-cost-calculator.arnica.io
tl;dr - not that it's surprising, but it's not cheap, especially if you want to do this continuously.
euroderf12 hours ago
Is Anthropic still majority French-owned? It would explain a lot about their entire approach to the wider ecosystem.
Yokohiii7 hours ago
Seems like you are confusing crack and tar as a healthy breakfast.
extr13 hours ago
Interesting it's in python!
zoobab13 hours ago
Open source crap to connect to an LLM blob.
bartoszcki13 hours ago
> Anthropic engineers on average ship 8x as much code per quarter
Are they making 8x more features or the same amount just with more code?
crooked-v12 hours ago
Going by the issues on their repos, it's 2x features and 6x regressions of bugs that were "already fixed".
crooked-v12 hours ago
I still find it so weird that they haven't bought out whoever controls the `anthropic` github username.
napsterbr9 hours ago
Or hacked them...
wslh12 hours ago
Looking forward to trying this tomorrow (it's late here). Has anyone run it on a real codebase yet? Curious about setup friction, cost, and signal/noise.
[deleted]13 hours agocollapsed
xuzhenpeng10 hours ago
[flagged]
EvanXue8 hours ago
[flagged]
notenkidev7 hours ago
[flagged]
afford-ai8 hours ago
[flagged]
edgardurand11 hours ago
[flagged]
xinchen036 hours ago
[dead]
vladsiu6 hours ago
[dead]
jungfty13 hours ago
[dead]
dclavijo13 hours ago
[dead]
zoobab13 hours ago
'open source' crap to connect to their LLM blob.