Comments URL: https://news.ycombinator.com/item?id=49504287

Points: 4

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=49399355

Points: 3

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=49198365

Points: 1

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=49133707

Points: 2

# Comments: 0

Oath is an open protocol for cryptographically signed human intent. Before an agent acts, it checks for an attestation:

oath attest --action "database:delete_records:project_alpha" \

        --context "cleanup approved"

# → ATTESTED proof: a1b2c3d4

If there's no attestation, the action is blocked. The interesting part: the absence of a signature is itself evidence. An agent can't claim it was authorized if there's no cryptographic proof that it was.

Security model: the private key never leaves your machine. The agent only calls verify, never attest. Attest is a human command. As secure as SSH key storage - same threat model, no central authority to compromise.

The repo has a working demo - an agent running 5 actions, 2 attested, 3 blocked — and a protocol spec at v1.0.0 (CC0, public domain). Anyone can implement the protocol in any language.

What's not there yet: multi-device sync and a Python package. Would appreciate feedback on the protocol design, especially the action class format (namespace:action:scope) and whether the signing model covers edge cases I haven't thought of.

Comments URL: https://news.ycombinator.com/item?id=47232113

Points: 1

# Comments: 2

Open in two tabs, join a room, start typing. That's the pitch.

SyncKit is an offline-first sync engine. Rust core compiled to WASM, TypeScript SDK, works in any framework.

What's new since v0.1.0 (which some of you saw here 75 days ago):

- Live demo (LocalWrite) - collaborative editor you can try right now

- Rich text CRDTs (Fugue + Peritext) not just LWW anymore

- Live cursors and presence

- React/Vue/Svelte adapters

- Multi-language servers (TypeScript, Python, Go, C#)

- 2,100+ tests, formally verified with TLA+

The demo shows character-level sync, slash commands, a community Word Wall, and offline editing. Disconnect your network, keep typing, reconnect - it merges automatically.

Known limitations:

- SDK undo/redo not yet wired into the demo editor (browser native works)

- No E2E encryption yet

Security note on the demo: LocalWrite is a public collaborative space with no authentication. Rooms are accessible to anyone with the URL and so don't share sensitive or personal data. The server sees all content in plaintext. Rate limiting and input validation are in place, but there's no content moderation or identity verification. Treat it like a public whiteboard.

GitHub: https://github.com/Dancode-188/synckit

npm: @synckit-js/sdk

Happy to answer questions about the CRDT implementation, architecture, or anything else.

Comments URL: https://news.ycombinator.com/item?id=46961250

Points: 4

# Comments: 1

I've been obsessed with the Ink & Switch "Local-First Software" vision for some time now—apps that work offline, feel instant, and give users control of their data. But every time I tried to build a local-first app, I hit the same wall: integration complexity.

The existing CRDT libraries (Yjs, Automerge) are incredible—they pioneered the algorithms that make local-first work. Kevin's optimization work on Yjs is masterful, and Automerge changed how I think about distributed systems.

But they're designed as modular primitives. You compose networking, storage, and conflict resolution yourself. That flexibility is powerful for complex systems, but it creates what I call the "Day 1 problem" for local-first: you spend 3 days wiring infrastructure before writing features.

I built SyncKit to solve this.

Different philosophy: Where Yjs gives you powerful primitives (build your own local-first stack), SyncKit gives you a pre-wired local-first database. Persistence, sync, presence—built-in, not plugins.

The technical approach: - Rust core with zero unsafe blocks (you can grep the codebase)

- TLA+ verified (explored 6.5M states to prove correctness)

- 154KB bundle (everything compiled together)

- 1,081 tests, 80 chaos tests

Performance: Competitive within 1-2ms of Yjs for standard ops. The win is local-first DX - one package that handles offline, sync, and conflict resolution.

What's included: - Rich text editing (Fugue algorithm for non-interleaving edits)

- Live cursors & presence

- Undo/redo (CRDT-native)

- IndexedDB persistence

- React/Vue/Svelte adapters

Built this in Nairobi, 9pm-3am. v0.1.0 got 601 stars in 3 weeks which honestly shocked me.

Try it live: https://synckit-demo.netlify.app GitHub: https://github.com/Dancode-188/synckit

Happy to answer questions about the TLA+ verification or the local-first architecture choices.

Comments URL: https://news.ycombinator.com/item?id=46326786

Points: 2

# Comments: 1

- It's client-server (not P2P)

- No Svelte adapters yet (coming in v0.2.0)

- Multiplayer games usually need P2P for lower latency

Better options for your use case:

- Jazz (jazz.tools) - Purpose-built for P2P collaborative apps

- TinyBase - Perfect signal model for Svelte/Solid, but you'd add your own sync

- Yjs - Mature CRDT with good P2P support

- RxDB - Heavier but has everything (queries, reactive, plugins)

If you went client-server instead of P2P, SyncKit would work once v0.2.0 adds Svelte support.

What's your preference? P2P or client-server? That'll determine the best fit.

ElectricSQL and PowerSync solve it differently (full SQL but weaker offline guarantees). For SyncKit, document-based state is an architectural choice, not something v0.2.0 will change.

I'm curious to know how you're working around this with Loro. Are you building your own query layer or are you keeping everything denormalized?

Thanks for the interest!

"Zero data loss" means system-level guarantees (no corruption from network failures, crashes, etc), not that concurrent edits to the same field are preserved. LWW definitely clobbers one of the edits.

What v0.1.0 does give you is field-level granularity (edits to different fields don't conflict) and guaranteed convergence (all devices reach the same state). But yeah, same field = last write wins.

The Rust core already has better CRDTs (Text, Counter, Set) that handle concurrent edits properly. They just need to exposed in the TypeScript SDK for v0.2.0.

I should clarify this in the docs. Thanks for pointing it out.

But since the core sync engine is pure Rust, native Android bindings are definitely possible. The main paths would be:

1. JNI bindings directly from Rust

2. Or using the existing WASM core with a JVM WASM runtime

Haven't prioritized this yet since v0.1.0 focused on web/JS ecosystem, but if there's demand for Android, I could explore it. Are you working on something that needs offline sync on Android?