Hacker News: afshinmeh

New comment by afshinmeh in "Tendril – a self-extending agent that builds and registers its own tools"

afshinmeh — Mon, 27 Apr 2026 15:51:13 +0000

> It solves the problem the originating user asked it to

Interesting. And is there a mechanism to go back and "fix" the tools after they are published? What happens if the tool decided to use the "id" attribute to click on buttons and now you have a new website that follows a different pattern to find the right target?

I agree that "correctness" of a tool could have different meaning depending on the context of the problem though (e.g. would you consider OOM a correctness bug even if it addresses the user's ask?)

New comment by afshinmeh in "Tendril – a self-extending agent that builds and registers its own tools"

afshinmeh — Mon, 27 Apr 2026 15:25:22 +0000

> how do we avoid burning tokens solving the same problems over again

Letting the LLM write half baked tools is the recipe for burning more tokens.

> There's a wiki the LLM searches before solving a problem, that links saved programs for past actions to their content entry.

What's the criteria for marking an LLM written tool as useful/correct before publishing it?

New comment by afshinmeh in "The Prompt API"

afshinmeh — Mon, 27 Apr 2026 05:08:54 +0000

https://github.com/mozilla/standards-positions/issues/1067

New comment by afshinmeh in "An AI agent deleted our production database. The agent's confession is below"

afshinmeh — Sun, 26 Apr 2026 17:13:44 +0000

It's actually interesting to me that the author is surprised the agent could make an API call and one of those API calls could be deleting the production database.

It's a sad story but at the same time it's clearly showing that people don't know how agents work, they just want to "use it".

New comment by afshinmeh in "ClawRun – Deploy and manage AI agents in seconds"

afshinmeh — Tue, 14 Apr 2026 21:04:52 +0000

I have been struggling with the same issue but help me understand this:

> The lack of predictable output/outcomes

How does that actually show up in practice for you? Asking because "lack of predictable output" could mean different things depending on the context.

ClawRun – Deploy and manage AI agents in seconds

afshinmeh — Tue, 14 Apr 2026 19:12:09 +0000

Article URL: https://github.com/clawrun-sh/clawrun

Comments URL: https://news.ycombinator.com/item?id=47770020

Points: 30

# Comments: 9

Google "6-7"

afshinmeh — Sat, 11 Apr 2026 06:01:26 +0000

Article URL: https://www.google.com/search?hl=en&q=6%207

Comments URL: https://news.ycombinator.com/item?id=47727871

Points: 9

# Comments: 2

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Fri, 03 Apr 2026 07:36:57 +0000

I'm adding snapshotting as well https://github.com/afshinm/zerobox/pull/21

Then you can run:

```

zerobox --snapshot -- sh -c 'echo "abc" > a'

```

and also `zerobox snapshot list/diff/restore`

Show HN: ClawRun – Deploy and manage AI agents in seconds

afshinmeh — Thu, 02 Apr 2026 19:25:14 +0000

Article URL: https://clawrun.sh/

Comments URL: https://news.ycombinator.com/item?id=47619016

Points: 2

# Comments: 0

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Thu, 02 Apr 2026 11:17:20 +0000

I agree. What would be the ideal DX from your point of view?

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Thu, 02 Apr 2026 11:13:31 +0000

Thanks for sharing this. I really like the idea

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 23:13:08 +0000

I've been testing this on Docker today, including the credential injection, env vars, net calls control. I will add more docs but one interesting use case would be to have something like `zerobox --profile nanoclaw -- nanoclaw`, or something similar.

I'd like to hear your thoughts.

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 22:45:54 +0000

I will run the same benchmark test on wasm sandboxes just to be able to compare it with Zerobox. I will share the results tomorrow.

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 22:09:27 +0000

I added some basic --debug support earlier today, but I will work on proper JSONL/Otel integration soon.

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 21:53:58 +0000

I think there is still a valid case for sandbox logs/otel. strace would give you the syscalls/traces but not _why_ a particular call was blocked in side the sandbox (e.g. the decision making bit).

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 21:13:23 +0000

That's true and the expected behaviour but I see your point. The example there is not great, I should've used `sk_s123...` to show that you are passing the env var to the sandbox as opposed to setting it on the host, then proxying it. I will update it.

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 21:10:49 +0000

Here is the video, running Claude with Zerobox, you can see the latency, etc. https://www.youtube.com/watch?v=xzsGsSsx0OI

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 21:06:40 +0000

I know. I will add more docs soon though, that should make it easier to navigate the code and understand what's going on.

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 20:43:15 +0000

That was my thinking, too. The only other option would be reimplement it in Rust (never researched what exists though).

New comment by afshinmeh in "Show HN: Zerobox – Sandbox any command with file, network, credential controls"

afshinmeh — Wed, 01 Apr 2026 20:39:50 +0000

I'd love to hear your thoughts! I've been primarily testing this with Bun + Vercel AI SDK for tool call sandboxing.