Hacker News: dhblumenfeld1

New comment by dhblumenfeld1 in "Show HN: Keypo – Secure Enclave encrypted secrets for AI coding agents"

dhblumenfeld1 — Tue, 17 Mar 2026 16:27:31 +0000

Every developer using Claude Code, Codex or Cursor has the same problem: your agent runs your code but it can also read your .env files. API keys, database credentials, anything on disk is visible to the agent.

I built keypo-signer, an open-source CLI that encrypts secrets in a vault backed by your Mac's Secure Enclave. The key command is vault exec: it decrypts secrets via Touch ID, injects them as environment variables into a child process, and the agent gets back stdout and an exit code. It never sees the secret values. They never touch disk, shell history, or the agent's context window.

See it in action: https://youtu.be/rOSyWQ3gw70

It's open source and self-custody: no cloud provider, no accounts to maintain.

There are three vault tiers: open (no auth), passcode and biometric (Touch ID).

Two demos showing what you can build on top of this:

1. Secure Agent Checkout (https://github.com/keypo-us/keypo-cli/tree/main/demo/checkou...): Tell your agent "buy me a hat" and it completes a real Shopify checkout with your actual credit card. Card details live in the biometric vault. The agent calls a wrapper script, Touch ID pops up on your Mac, and a headless browser fills the payment form inside a child process the agent can't inspect. You get an order confirmation email. The agent never sees your card number.

2. Agent Wallet (https://github.com/keypo-us/keypo-cli/tree/main/demo/hermes-...): A hardware wallet for your agent. Uses EIP-7702 smart accounts with the Mac Secure Enclave so your agent can send on-chain transactions but the private key never leaves the hardware. Touch ID gates every signature.

macOS/Apple Silicon only (Secure Enclave is the point). Swift + Rust. brew install keypo-us/tap/keypo-signer

https://github.com/keypo-us/keypo-cli

Show HN: Keypo – Secure Enclave encrypted secrets for AI coding agents

dhblumenfeld1 — Tue, 17 Mar 2026 16:26:23 +0000

Article URL: https://github.com/keypo-us/keypo-cli

Comments URL: https://news.ycombinator.com/item?id=47414878

Points: 5

# Comments: 1

New comment by dhblumenfeld1 in "Privacy-first tools you buy once and own forever. No subscription.Productivity"

dhblumenfeld1 — Fri, 13 Mar 2026 22:07:02 +0000

This is dope. Love local-first tools. Would be dope to have an iOS/macOS version that I can just buy through the app store (and is hence synced across my devices).

New comment by dhblumenfeld1 in "The anxiety driving AI's brutal work culture is a warning for all of us"

dhblumenfeld1 — Fri, 13 Mar 2026 22:00:18 +0000

Increasingly convinced that most AI doomerism is coming from the VC / Startup ecosystem because the industry, or game, they've been playing for the last 20 years is undergoing the most disruption.

New comment by dhblumenfeld1 in "E2E encrypted messaging on Instagram will no longer be supported after 8 May"

dhblumenfeld1 — Fri, 13 Mar 2026 21:55:39 +0000

wouldn't signal fall under this category (same entity control the client and server in between) but they have no way of peaking inside any envelopes?

New comment by dhblumenfeld1 in "You deleted everything and AWS is still charging you?"

dhblumenfeld1 — Fri, 13 Mar 2026 21:52:26 +0000

I recently dealt with something similar with a CDN I used for a project 3 years ago. They kept charging me $0.01/month after I got all of my content off of their servers. Took months to resolve, luckily was pennies so it wasn't a big deal but very frustrating.

New comment by dhblumenfeld1 in "Can I run AI locally?"

dhblumenfeld1 — Fri, 13 Mar 2026 21:49:39 +0000

Have you found that using a frontier model for planning and small local model for writing code to be a solid workflow? Been wanting to experiment with relying less on Claude Code/Codex and more on local models.

New comment by dhblumenfeld1 in "Show HN: Ash, an Agent Sandbox for Mac"

dhblumenfeld1 — Wed, 11 Mar 2026 17:06:41 +0000

this is great. The environment variable control is particularly interesting to me. I've been working on a related problem but different approach: encrypting/decrypting secrets using the Mac's secure enclave (https://github.com/keypo-us/keypo-wallet/tree/main/keypo-sig...). The two approaches seem complementary: Ash controls the perimeter, encrypted vaults protect the values themselves.

New comment by dhblumenfeld1 in "Show HN: AgentSign – Open-source zero trust engine for AI agents"

dhblumenfeld1 — Wed, 11 Mar 2026 16:58:37 +0000

V interesting. Does the passport have history of what the agent has done in the past and if so, how are you able to verify that work? Specifically thinking about agents that may work across different systems.

Might be worth checking this out: https://www.8004.org/ it's more crypto specific but trying to tackle the problem of verifying an agent cross platforms.