It’s a bit frightening in practice because it starts building up “knowledge” of what everyone in our group is interested in (games, hobbies, food) and their personalities, politics, etc. Sonnet 4.6 in particular tends to query the graph and make jokes, matching the vibe on discord.

On a more serious use-case: it also stores system topology in the graph so, while it does document the system in various READMEs and CLAUDE.md files, the graph provides a fast at a glance reference for how the systems interact. I have no evidence but I imagine this could be useful and more dense / token efficient than massive documentation, even for products, features, etc.

It could have installed say, that vulnerable version of litellm, and the entire VM is compromised. But it’s on an isolated vlan anyway so the worst it can really do is use bandwidth and maybe hurt my IP reputation? I could move it to a cloud VM but the risks seem minimal at the moment. I’m definitely not advocating for no defense in depth, but npm install in an isolated VM feels safer than npm install on my work laptop these days :-)

It arrived at the same incredibly fun behavior as you talk about in the readme, where the agent just builds all sorts of junk for you autonomously. It has built dozens of web apps, static pages, mini games, etc. all tied back into a central domain that I gave it. I truly have no idea what the system or code looks like but it’s been so much fun just letting it build.

The “For People Who Don't Write Code” is so true as well. We have someone in discord that has never written code but they can ask the agent to build virtually anything, it goes off and churns, then pops back with a link to it running live. It’s honestly been so much fun with friends, highly recommend trying it out.

As to how one IP can originating from multiple locations: anycast.