Members-Only
Recent Talks & Demos are for members only
You must be an AI Tinkerers active member to view these talks and demos.
agentctl: A local security layer for coding agents with replay
Explore a local security layer for coding agents, gating risky actions like package installs and shell execution, with replayable JSONL traces for policy testing.
agentctl is a local Go security control tool for coding agents (Claude Code, Codex) that I built to explore one question.
- What’s the smallest useful security layer you can put between a coding agent and the things that can actually hurt your machine?
It gates 5 risky action categories (package installs, shell execution, secret access, file writes, outbound API calls), writes a JSONL trace for every decision, and replays past sessions against a different policy.yaml to see what would have been blocked, escalated, or approved differently. No daemon, no cloud, no repo-local config. Everything lives in ~/.agentctl/.
Live, I’ll attach it to Claude Code, run an agent task that tries to hit an external API, watch the hook block or escalate those actions inline, then edit policy.yaml to tighten the rules and replay the same session under the new policy, showing the decision diff. On screen: the hook config, the policy YAML, raw
traces.jsonl, the replay output, and the terminal UI.
CLI tool for managing and orchestrating autonomous AI agent lifecycles.
- GoGo is Google's open-source, compiled, and statically-typed language built for high-performance, scalable systems (microservices, cloud infrastructure) via simple, efficient concurrency (goroutines).Go (often called Golang) is a compiled, open-source language designed at Google by Robert Griesemer, Rob Pike, and Ken Thompson to solve modern software challenges: slow build times and complex dependencies. It is statically-typed and syntactically clean, drawing inspiration from C but adding key features like automatic garbage collection and a powerful, built-in concurrency model (goroutines and channels). This design delivers fast compilation and runtime efficiency, making it the premier choice for building scalable, reliable systems; major projects like Docker and Kubernetes rely on Go for their core infrastructure.
- YAMLYAML (YAML Ain't Markup Language) is a human-friendly data serialization language prioritizing readability and ease of use.YAML is a human-readable data serialization language, primarily used for configuration files and inter-process data exchange. It employs a minimal, indentation-based syntax (like Python) to define structure, utilizing colons for key-value pairs (mappings) and hyphens for list items (sequences). YAML is a superset of JSON, offering key benefits like support for comments and reusable data references (anchors). This clarity and feature set make it the standard for major DevOps tools, including Kubernetes deployments and Ansible Playbooks.
- Model Context Protocol (MCP)MCP is the open-source standard for securely connecting AI agents (like LLMs) to external tools, data, and enterprise workflows.The Model Context Protocol (MCP) functions as a standardized integration layer: think of it as a USB-C port for AI applications. Developed and open-sourced by Anthropic, this protocol allows large language models (LLMs) to access real-time context and execute actions via external tools like GitHub, Jira, or proprietary databases . It uses a simple JSON-RPC interface to define tools, schemas, and endpoints, which enables AI agents to perform complex, state-changing tasks—such as creating a GitHub issue or running a test script—rather than just generating text . MCP is essential for building agentic AI systems that can autonomously pursue goals and operate within defined safety and permission boundaries .
- JSONLJSON Lines (JSONL) is a text format for storing structured data where each individual record occupies a single line.JSONL streamlines large-scale data processing by treating every line as a valid JSON object. Unlike standard JSON arrays, this format allows for incremental parsing and streaming: you can append new records without rewriting the file or loading 50GB into memory. It is the industry standard for high-throughput logging, ETL pipelines, and training datasets for LLMs like GPT-4. By using the .jsonl extension and UTF-8 encoding, developers ensure compatibility with Unix tools like grep and awk while maintaining the rich structure of nested data.
- charmbracelet/bubbleteaA powerful Go framework for building sophisticated terminal user interfaces based on the Elm Architecture.Bubble Tea streamlines TUI development by treating terminal apps as functional programs. It uses a strictly defined Model-Update-View loop to handle state transitions and I/O through messages and commands. Developers leverage its robust ecosystem (including Lip Gloss for styling and Bubbles for UI components) to build everything from simple command-line tools to complex dashboards like the Git client Soft Serve. The framework manages the terminal's alternate screen buffer and mouse support automatically, allowing you to focus on logic rather than low-level escape sequences.
Compose Email
Loading recent emails...