if this moves nicotine to the black market then the people/government will still pay the cost without receiving any taxes on it at all

... why does TicoFruit even care? Did they just see their competitor do something that might be good for people and sue them out of spite?

Personally, although I'm not a Linux maintainer, I am a dev and I love doing work that makes UX better for everyone.

This finally forced me to quit League of Legends (this is a buff)

- We had to take spelling tests in school

- English speakers make (generally light) fun of other's spelling or grammar mistakes in a casual setting

- In a professional setting, a lot of time is taken to proofread our own emails

- There's de jure spellings for every word

- Some online communities are really weird about pointing out grammar and spelling mistakes (namely Reddit)

Language is meant to be a fluid, evolving thing but I always felt like English was treated the opposite way. Maybe that's also why it's the de facto Lingua Franca.

I do think, and hope, that this rigidity will change thanks to AI. I've started to embrace my mistakes. I care a lot less about capitalization and punctuation in my Slack messages, for example.

- There's nothing Canadian about a pancake house. We love pancakes but they aren't really ingrained with our identity. Maple syrup on the other hand, is EXTREMELY important to a lot of Canadians. Serving table syrup instead of real maple syrup is an affront. I found a Reddit thread[1] where a user espouses "tons of free syrup" you were given at RCPH. That's NOT a good thing if you ask me!

- In Canada (and I assume other British Commonwealth countries) you aren't legally allowed to have "Royal" in the name of your business without Royal consent from the Governor General of Canada[2]

Just a bit of Canadiana sparked by your comment I thought I'd share. I always get a kick of the small but conspicuous cultural differences between Canada and USA. They give me that Ingluorious Basterds "number 3" moment.

[1] https://www.reddit.com/r/newyorkcity/comments/1ajujhi/who_re...

[2] https://www.canada.ca/en/canadian-heritage/services/royal-sy...

This:

> I suspect that removing half of the bus stops in a city will piss people off and cause even less ridership.

is thrown out but how do we know it's true? That commenter throws it out as their opinion but my opinion is the opposite -- the stated preference will be that people think it's bad but the revealed preference will show even more ridership as travel times improve.

Shout out to https://github.com/vosen/ZLUDA which is also in this space and quite popular.

I got Zluda to generally work with comfyui well enough.

You can read it yourself if you'd like: https://news.ycombinator.com/item?id=46589386

It was not just the em dashes and the "absolutely right!" It was everything together, including the robotic clarifying question at the end of their comments.

Unfortunately, it's not. Once you read through the slop the implementation is still getting a pass/fail security response from the LLM, which the premise of OP's article is railing against.

1. as many have harped about, the LLM writing is so fluffed up it's borderline unreadable. Please just write in your own voice. It's more interesting and would probably be easier to grok

2. that repo is obviously vibe-coded, but I suppose it gets the point across. It doesn't give me much confidence in the code itself, however.

And a big thing:

Unless I'm misunderstanding, I feel like you are re-inventing the wheel when it comes to Authorization via MCP, as well as trying to get away with not having extra logic at the app layer, which is impossible here.

MCP servers can use OIDC to connect to your auth server right now: https://modelcontextprotocol.io/docs/tutorials/security/auth...

You give the following abstractions, which I think are interesting thought experiments but unconventional and won't work at all:

    Ring 0 (Constitutional): System-level constraints. Never overridable.
        Example: "Never self-replicate" "Never exfiltrate credentials"

    Ring 1 (Organizational): Policy-level constraints. Requires admin authority to change.
        Example: "No PII in outputs" "Read-only database access"
    
    Ring 2 (Session): User preferences. Freely changeable by user.
        Example: "Explain like I'm five" "Focus on Python examples"

    # Generate (Pass filtered tools to LLM)
    response_text, security_blocked = self._call_llm(
        query, history, system_prompt, allowed_tools, tools
    )

     Standard RBAC acts as a firewall: it catches the model’s illegal action after the model attempts it.

The best you can do is inject the user's roles and permissions in the prompt to help with this, if you'd like. But it's kind of a waste of time -- just feed the response back into the LLM so it sees "401 Unauthorized" and either tries something else or lets the user know they aren't allowed.

I'm sorry, but as a resident of Ontario and a developer this whole posting just enrages me. I don't want to discourage OP but you should know there's a lot just incorrect here. I'd be much more relaxed about that if it all wasn't just one-shotted by AI.