[claude-hackernews] Reply draft: Agentctl Show HN, replay-against-old-traces vs real-time hooks (id=48057567)#61
Open
NiveditJain wants to merge 1 commit intomainfrom
Open
Conversation
…s vs real-time hooks (id=48057567) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
📝 WalkthroughWalkthroughA new markdown draft is added to respond to a Show HN post about ChangesShow HN Draft Addition
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@drafts/2026-05-08T133311Z.md`:
- Around line 16-26: The fenced code block beginning with a plain
triple-backtick (the block containing the disclosure and the two questions)
lacks a language identifier and triggers markdownlint MD040; fix it by editing
that fenced block to use a language tag (use "text") so the opening fence reads
```text and keep the closing ``` unchanged, ensuring the literal content inside
the block is preserved.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: d98ff1f5-3518-4a0c-bbd8-d4f9824b3fbf
📒 Files selected for processing (1)
drafts/2026-05-08T133311Z.md
Comment on lines
+16
to
+26
| ``` | ||
| (disclosure: I work on FailProof AI: https://github.com/exospherehost/failproofai) | ||
|
|
||
| The replay-against-old-traces loop is the part I think ages best. We took a different cut at the same seam. Hooks in JS, allow/deny/instruct returned to the agent inline, decisions to NDJSON for inspection. No replay step today. Doing it well needs the trace to capture enough context (cwd, tool inputs, surrounding events) that a re-run produces the same verdict, which gets harder once policies branch on environment. | ||
|
|
||
| Two questions: | ||
|
|
||
| 1. How does replay survive tool/SDK upgrades? A trace from last week may not replay against a tighter rule if the tool name or input shape moved. | ||
|
|
||
| 2. Do you gate outbound calls at the process layer (proxy or dns) or at the tool-call boundary? Different blast-radius story for each. | ||
| ``` |
There was a problem hiding this comment.
Add a language tag to the fenced block to satisfy markdown lint
Line 16 uses a plain triple-backtick fence; markdownlint MD040 expects a language identifier. Use ```text since this is literal post content.
Proposed fix
-```
+```text
(disclosure: I work on FailProof AI: https://github.com/exospherehost/failproofai)
@@
-```
+```🧰 Tools
🪛 markdownlint-cli2 (0.22.1)
[warning] 16-16: Fenced code blocks should have a language specified
(MD040, fenced-code-language)
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@drafts/2026-05-08T133311Z.md` around lines 16 - 26, The fenced code block
beginning with a plain triple-backtick (the block containing the disclosure and
the two questions) lacks a language identifier and triggers markdownlint MD040;
fix it by editing that fenced block to use a language tag (use "text") so the
opening fence reads ```text and keep the closing ``` unchanged, ensuring the
literal content inside the block is preserved.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Reply draft for the Show HN of
agentctl(https://news.ycombinator.com/item?id=48057567), a Go single-binary local control plane for coding agents that gates risky actions (package installs, shell exec, secret access, file writes, outbound API calls). Same seam as FailProof AI; different design choices./showfeed sweep -> spotted Agentctl as an adjacent same-layer Show HN bychocks, 11h old, 0 comments at draft time, OP is a solo dev soliciting feedback..failproofai/path talk.Files
drafts/2026-05-08T133311Z.md- full draft + insight-for-the-team notes + discovery findings.Test plan
INSTRUCTIONS.md"Length and shape" + "Forbidden in any reply" rules.(disclosure: I work on FailProof AI: https://github.com/exospherehost/failproofai)is the leading line, lowercasedisclosure, plain parens.🤖 Generated with Claude Code
Summary by CodeRabbit