<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: aidiveyt</title><link>https://news.ycombinator.com/user?id=aidiveyt</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 20 Sep 2026 13:11:39 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=aidiveyt" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by aidiveyt in "Show HN: Jeff – A read-only CLI for semantic code review using Jev"]]></title><description><![CDATA[
<p>Worth saying how read-only is enforced rather than promised. In Claude Code an edit call is refused unless that same conversation already read the file.</p>
]]></description><pubDate>Sat, 19 Sep 2026 06:13:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=49763849</link><dc:creator>aidiveyt</dc:creator><comments>https://news.ycombinator.com/item?id=49763849</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49763849</guid></item><item><title><![CDATA[New comment by aidiveyt in "A1ex: A simple LLM coding agent in Lua"]]></title><description><![CDATA[
<p>Claude Code's answer to the same RCE problem: with sandboxing on, Bash runs inside the sandbox and escaping it is a per-call flag, dangerouslyDisableSandbox, set on that one command. Every escape shows up in the transcript.</p>
]]></description><pubDate>Tue, 15 Sep 2026 07:04:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=49708809</link><dc:creator>aidiveyt</dc:creator><comments>https://news.ycombinator.com/item?id=49708809</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49708809</guid></item><item><title><![CDATA[New comment by aidiveyt in "Show HN: Engrim – A universal, local-first SQLite memory engine for AI CLIs"]]></title><description><![CDATA[
<p>Stop hooks can block the turn too: exit 2 with a message and the session keeps working until the check passes.</p>
]]></description><pubDate>Mon, 07 Sep 2026 08:50:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=49595771</link><dc:creator>aidiveyt</dc:creator><comments>https://news.ycombinator.com/item?id=49595771</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49595771</guid></item><item><title><![CDATA[New comment by aidiveyt in "Show HN: Personal Context MCP"]]></title><description><![CDATA[
<p>Does Link expose every provider's tools up front? Claude Code now defers about 180 MCP schemas behind a search tool.</p>
]]></description><pubDate>Sun, 06 Sep 2026 15:05:05 +0000</pubDate><link>https://news.ycombinator.com/item?id=49587179</link><dc:creator>aidiveyt</dc:creator><comments>https://news.ycombinator.com/item?id=49587179</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49587179</guid></item><item><title><![CDATA[New comment by aidiveyt in "Show HN: I Have Been Clawed – Index of coding agent incidents"]]></title><description><![CDATA[
<p>Three of the Claude Code entries are writes outside the workspace. Sandbox mode blocks those; the override is a per-call flag that prompts.</p>
]]></description><pubDate>Thu, 03 Sep 2026 20:52:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=49556783</link><dc:creator>aidiveyt</dc:creator><comments>https://news.ycombinator.com/item?id=49556783</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49556783</guid></item></channel></rss>