Evidence-first research

Show HN: Beating GPT5.5-xhigh for Coding agent security with SLMs and IRM

Coding agents craft arbitrary code so securing them is more complicated than red-teaming. We post trained a cyber-security small llm, changed how it reasons and supplemented our controls using program analysis techniques such as inline reference monitoring to outperform GPT5.5-xhigh on hard benchmarks like LinuxArena and SleightBench. Free product available at harden.run and full benchmarks in the blog post.

Ghost 3.0 - Any AI you already pay for, in your notch. Ask anything, search your files, run your Mac. Frontier Intelligence, as your co-pilot. (24 Hour Free Trial)

24 Hour Free Trial! Problem: Focused work on macOS means juggling your Claude CLI or App, a local-model UI, a terminal agent, a document viewer, a timer, and Calendar. Ghost collapses that into a menu-bar surface: ⌥Space anywhere, a panel drops from the top, you type or attach a file, and a 14-kind intent classifier routes the prompt to the right provider, local or cloud. Escape dismisses it. No Dock icon, no tab management. The 14 kinds cover answer, research, local file search, file summary, screen OCR, clipboard, create a file, organize files, automation, Messages, code, debug, review, and terminal. Alongside that: local semantic recall over a personal knowledge base, a pomodoro timer with a persistent study log, a terminal section that is a shell plus a coding agent, a PopClip-style selection bar for rewriting text in any app, and standing "when I ask X, read file Y" rules for your own documents. Comparison: Raycast Pro is $8/mo billed annually or $10/mo monthly, and the AI is subscription-gated and hosted. Ghost is one payment, and the model layer is yours: point it at Ollama or LM Studio and run entirely offline, free forever, or bring your own API keys (stored in the Keychain, never in a config file). Eight providers, plus your existing Claude Code or Codex CLI subscription if you already pay for one. Privacy is takes the front seat. File search is fully local — SQLite + FTS5, sentence-aware chunking, 30+ formats, an FSEvents watcher keeping the index live — so nothing

@thekitze I am literally a Linux user and I agree, GNOME > macOS > Windows >>>>> whatever the actual fuck Omarchy is doing Maybe it's because it's my first time trying a tiling window manager but it's genuinely HORRENDOUS

Show HN: Sparrow-2 – Solving the cocktail party problem

Hey there, I’m Brian. I've been shipping conversational models over here at Tavus for the past two years. I want to tell you about our new audio-understanding model: Sparrow-2! It’s a new category of model and a unique new approach to conversational audio. Earlier this year we launched Sparrow-1, (at the time) our SoTA turn taking model. Since our Sparrow-1 launch, I’ve spent a lot of time listening to humans talking and trying to really understand how people know when to talk, when to listen, and when to wait. I’ve also been hunting down failure modes of the current SoTA models. And while Sparrow-1 is great, there are some failure patterns I see. We tried solving the problems with existing approaches, but solving one problem only created another. Sparrow-1 and a lot of the existing turn taking models require noise cancellation to isolate the speaker’s audio from background noise. After removing the “noise” these models rely on simple prosodic and phonetic cues from spoken words to decide when a turn has ended. They throw out information and then pay attention to a small set of verbal and prosodic cues. This approach ignores a ton of important information. Non-verbal cues, sounds, and environmental noise impact turn taking. Noise cancellation models assume everything non-transcribable is noise, but that’s wrong. Humans use breath, sighs, and other sounds to hold the conversational floor or bid for a turn. There are constant micro-interruptions, affirmations, quiet human and e

App Trust Preview - See what is inside a Mac app and what it can do before you open it

When you download an unfamiliar Mac app, macOS does not give you one place to understand what it can actually do before you open it. Entitlements, bundle properties, sandbox status, internal components, libraries, privacy permissions, network references, and download origin are separate technical clues that normally take experience and several tools to investigate. # What I built I made [App Trust Preview](https://apptrustpreview.com/?utm_source=reddit) so anyone can dig inside an app and understand those clues in one human-readable **Quick Look** preview before opening it. I often reverse engineer Mac apps, and I brought that experience into the scanner. It does more than list entitlements, properties, and the sandbox status of the main executable. It makes a best effort to inspect as much of the entire bundle as possible and brings important findings to the front. [App Trust Preview](https://apptrustpreview.com/?utm_source=reddit) analyzes which libraries and frameworks the target can load, detects private Apple API signals, and checks whether bundled components may run outside the main app's sandbox or use exceptions that provide broader access. It scans files throughout the target for potential URLs, which can reveal possible services and domains the app may use before you launch it. I also added a **Download history panel**. It reads recorded macOS metadata and shows where the software came from, including the original download URL when it is available. If you no longer

Tell HN: Man, AI is killing my brain

I was among the last to resist, but then I was given a subtle hint that if I won't "improve my productivity and be on par with my colleagues" my work will be at risk. So I started to use Claude Code about a year ago. At first, I'd give it small tasks, review every line it wrote, opened a proper PR, review again, ask questions, ask it to fix stuff I don't like. But I saw that my colleagues were shipping more, and so I started to ease on my reviews. At first, I would push small features straight to main. But my colleagues were shipping 10x more than me, and I need my job, so I started to push more and rely more on AI. As the agent was doing its work, sometimes 20-30 minutes, I would mindlessly scroll social media, something I tried to avoid for a very long time. But then I saw that my peers are using work trees, running multiple agents. So I started to do the same. Now, instead of mindlessly scrolling, I was launching 4-5 agents, juggling between their output. At some point, I was no longer having mental capacity to understand so much context, so I just started to chose the "Recommended" suggestion by Claude. I no longer know the code, or how things work. If there is a bug, I just copy the user complaint / bug description into Claude and let it figure it out. The good/bad part is that it seems to work. And I'm afraid what's next. Almost one year later and I'm no longer sure I can write code any more. Hell, I'm even struggling to write this post because AI is very good

Show HN: My Claude quota ran out in 10 minutes, so I made a tool to find out why

[OS] AirStats: a free, ultra-lightweight system monitor for Mac

AirStats is a free and open-source system monitor for Apple silicon Macs. It is designed for people who want useful live system information without leaving another large application running all day. The app is 9 MB. 7x smaller than the biggest competitor (iStat Menus, 67 MB) It reads CPU, memory, GPU, network, disk, battery, temperature and top-process information directly through Mach, IOKit, sysctl and CoreWLAN. It displays those readings in: * the menu bar * a full panel that drops down when you click the status item an * optional desktop widget you can leave on screen. The menu bar and desktop widget each have their own configurable list of metrics. The panel always shows everything, and you can collapse the sections you do not need. Several MacBook users who tried AirStats told me the notch had already taken most of their menu bar, so the desktop widget was more useful to them than adding more readouts there. **Comparison** iStat Menus and Stats are the closest alternatives. Both are more thorough and cover more sensors. AirStats is deliberately narrower and much smaller. It is a better fit if you mainly want live readings in a lightweight app that can remain running throughout the day. AirStats is written in native Swift and runs as one process, with no Electron, web view, helper daemon, launch agent or Dock icon. **Pricing** $0. It is completely free under the MIT license, with no account, subscription or paid tier. Download: [https://airstats.app](https://airstats.app

App Trust Preview - See what is inside a Mac app and what it can do before you open it

When you download an unfamiliar Mac app, macOS does not give you one place to understand what it can actually do before you open it. Entitlements, bundle properties, sandbox status, internal components, libraries, privacy permissions, network references, and download origin are separate technical clues that normally take experience and several tools to investigate. # What I built I made [App Trust Preview](https://apptrustpreview.com/?utm_source=reddit) so anyone can dig inside an app and understand those clues in one human-readable **Quick Look** preview before opening it. I often reverse engineer Mac apps, and I brought that experience into the scanner. It does more than list entitlements, properties, and the sandbox status of the main executable. It makes a best effort to inspect as much of the entire bundle as possible and brings important findings to the front. [App Trust Preview](https://apptrustpreview.com/?utm_source=reddit) analyzes which libraries and frameworks the target can load, detects private Apple API signals, and checks whether bundled components may run outside the main app's sandbox or use exceptions that provide broader access. It scans files throughout the target for potential URLs, which can reveal possible services and domains the app may use before you launch it. I also added a **Download history panel**. It reads recorded macOS metadata and shows where the software came from, including the original download URL when it is available. If you no longer

Tell HN: Man, AI is killing my brain

I was among the last to resist, but then I was given a subtle hint that if I won't "improve my productivity and be on par with my colleagues" my work will be at risk. So I started to use Claude Code about a year ago. At first, I'd give it small tasks, review every line it wrote, opened a proper PR, review again, ask questions, ask it to fix stuff I don't like. But I saw that my colleagues were shipping more, and so I started to ease on my reviews. At first, I would push small features straight to main. But my colleagues were shipping 10x more than me, and I need my job, so I started to push more and rely more on AI. As the agent was doing its work, sometimes 20-30 minutes, I would mindlessly scroll social media, something I tried to avoid for a very long time. But then I saw that my peers are using work trees, running multiple agents. So I started to do the same. Now, instead of mindlessly scrolling, I was launching 4-5 agents, juggling between their output. At some point, I was no longer having mental capacity to understand so much context, so I just started to chose the "Recommended" suggestion by Claude. I no longer know the code, or how things work. If there is a bug, I just copy the user complaint / bug description into Claude and let it figure it out. The good/bad part is that it seems to work. And I'm afraid what's next. Almost one year later and I'm no longer sure I can write code any more. Hell, I'm even struggling to write this post because AI is very good

Show HN: My Claude quota ran out in 10 minutes, so I made a tool to find out why

[OS] AirStats: a free, ultra-lightweight system monitor for Mac

AirStats is a free and open-source system monitor for Apple silicon Macs. It is designed for people who want useful live system information without leaving another large application running all day. The app is 9 MB. 7x smaller than the biggest competitor (iStat Menus, 67 MB) It reads CPU, memory, GPU, network, disk, battery, temperature and top-process information directly through Mach, IOKit, sysctl and CoreWLAN. It displays those readings in: * the menu bar * a full panel that drops down when you click the status item an * optional desktop widget you can leave on screen. The menu bar and desktop widget each have their own configurable list of metrics. The panel always shows everything, and you can collapse the sections you do not need. Several MacBook users who tried AirStats told me the notch had already taken most of their menu bar, so the desktop widget was more useful to them than adding more readouts there. **Comparison** iStat Menus and Stats are the closest alternatives. Both are more thorough and cover more sensors. AirStats is deliberately narrower and much smaller. It is a better fit if you mainly want live readings in a lightweight app that can remain running throughout the day. AirStats is written in native Swift and runs as one process, with no Electron, web view, helper daemon, launch agent or Dock icon. **Pricing** $0. It is completely free under the MIT license, with no account, subscription or paid tier. Download: [https://airstats.app](https://airstats.app

Is there a good disney plus app?

I know there arent any official ones but i tried the clicker for disney plus app and it wont work like the clicker for netflix one does. The disney plus one sends me to the help page or something instead of being able to watch anything.

Show HN: Watches user sessions, finds bugs that matter, and fixes them

Hey HN, I’m Abhishek. I'm building Opslane, an open-source agent that identifies user-facing issues and investigates them. It only creates a PR if it can verify the fix. Demo: https://youtu.be/ccuOTYQMeYg Docs: https://docs.opslane.com At my last job at Robinhood, we used to do a quarterly bug bash. We would go through our Sentry backlog and try to fix as many of them as possible. We only fixed bugs we knew were reported by customers. We had hundreds of bugs, and Sentry’s default priority levels made no sense. After the bug bash, we would declare bankruptcy - select all remaining bugs and mark them as resolved. This problem has only gotten worse since coding agents have become more prevalent. So I started thinking: what would Sentry look like if it were built in 2026? To me, error trackers have two failure modes: 1. False positives: They show you thousands of errors, and you can’t tell the impact on the user 2. False negatives: Many user-facing issues don’t throw exceptions, so they go unnoticed. Opslane combines error tracking and session recording. And there is an agent that acts on both. To get started, you install the Opslane SDK. It captures everything the user did: errors, console logs, network requests, and session recordings. Opslane reduces false positives by ranking issues based on how many users are facing a particular issue. It also learns about your product by reading your code and watching your session recordings. False negatives are har

Kompakt - a free & open source image & video compression menu bar app

Hello [r/macapps](https://www.reddit.com/r/macapps/), I recently built a small, native image & video compression app called Kompakt. It's completely free and open source. As someone who constantly designs and builds stuff, I got tired of opening ImageOptim constantly whenever I needed to compress an image or video, so I thought I'd build an app to fit my daily needs. I'm sure someone else out there would appreciate it too. Whenever you drag an image or video anywhere on your Mac, a side sheet appears that lets you either convert or optimize that file. If it gets in the way, simply press ESC to get rid of it. I know Clop exists, but I kept getting annoyed by the constant popups on each copy, and it was overkill for my needs. You can download it at [kompaktapp.com](https://kompaktapp.com/). There's a mock demo on the site too to showcase how it works. GitHub link is also available on the site. In the near future I plan on adding more filetype support (PDF is a big one, just gotta figure out the Ghostscript licensing stuff), and most likely watched folders. Hope someone finds a use for it! To the mods: * I have a paid dev account, but the app isn't MAS compatible due to its nature * You can find my LI [here](https://www.linkedin.com/in/edinabazi/)

Show HN: Proval – Self-hosted code review agent for GitLab, Forgejo, and GitHub