Blog — Intrane.fr

Product · August 2026

Your AI Agent Is Leaking Your Secrets

I audited a secret manager that had AES-256-GCM, X25519 sealed responses, ACLs, and attestation. It leaked secrets in the simplest way possible: the exec command passed child stdout straight to the model. No interception, no scrubbing. Here's how I found it, why it matters, and how veil fixes it — mandatory output scrubbing, no raw output by default, sealed mode as the only mode.

#security #secrets #agent-first #machin #mfl #encryption #open-source

Product · August 2026

Your Homelab Behind CGNAT — Now Reachable for Free

If your ISP puts you behind CGNAT, you can't SSH into your home server from outside. VPNs work but add complexity. rcmd now has a free hosted relay — 3 servers, no credit card, no ports to forward, works from anywhere.

#remotecmd #homelab #self-hosted #networking #cgnat #free-tier #relay

Product · August 2026

99 MB to 71 KB: rewriting MiniStats in Machin

MiniStats is a real-time metrics dashboard built with Bun — the binary is 99 MB because it bundles the entire runtime. I rewrote it in Machin/MFL, a language that compiles through C. The binary is 71 KB. That's a 1400× reduction. Same features, same dashboard, same commands.

#machin #mfl #ministats #tinystats #binary-size #compilers #websocket #open-source

Product · August 2026

I have four machines. I wanted to see them all at once. So I built MiniStats.

Prometheus + Grafana takes an afternoon and 4 GB of RAM to show me what uptime already knows. MiniStats is a 25 MB binary that does the same thing in seconds — one server, N clients, a WebSocket, no database. Here's why I built it and how it works.

#ministats #monitoring #bun #typescript #homelab #open-source

Product · August 2026

My headset was connected but not recognized. So I built a one-click app.

A USB headset that shows up in lsusb but never appears as an audio device is the most frustrating Linux desktop bug there is. Here's the debug, the three-line fix (pulseaudio -k), and the 900 kB one-click app I built in machin so nobody else has to remember it.

#machin #pulseaudio #linux #desktop-app #raylib #dogfooding

Product · August 2026

I Told My Agent What It Couldn't Do. It Found a Way Anyway.

I built a permission system for AI agents. A live model found the hole in it, on its own, twice — and the destructive-approval gate I thought was the real backstop turned out to need proving too.

#commis #ai-agents #security #dogfooding #open-source #agent-first

Product · August 2026

Stop Giving AI Agents Your SSH Keys

Your AI agent needs to run commands on your servers. The only credential most people have to give it is an SSH key: everything, forever, with no record. rcmd's answer is a token scoped to named machines, expiring by default, revocable in one command, with every action audited — now one command to mint, and an MCP server to plug into. Includes the two security bugs I found in my own audit trail while building it.

#agent-tokens #ai-agents #devops #infrastructure #mcp #open-source #remotecmd #security #ssh

Product · August 2026

How I Made remotecmd 1.7× Faster Than scp Over a 77ms Relay

remotecmd routes file transfers through a WebSocket relay — which means a single TCP stream can't fill the pipe on high-RTT links. I spent two days reading kernel source, CERN GridFTP papers, and gorilla/websocket internals. The result: parallel TCP streams that auto-tune by file size, atomic header+binary framing in the relay, and gzip writer pooling. 50MB over 77ms RTT: 1.74× faster than single stream, 1.21× faster than scp. Here's what worked, what didn't, and why.

#remotecmd #performance #tcp #websocket #parallel-streams #open-source #devtools

Engineering · August 2026

I benchmarked my language against Rust and Zig, and deleted my best number

I set out to prove my language beats Rust and Zig. The first thing I found was my own benchmark measuring the order I ran things in — turning a claimed 20-25% win into a tie. Here is what machin actually wins, what it loses, and the 45ms speedup I wrote and then threw away.

#machin #benchmarks #rust #zig #compilers

Engineering · August 2026

Where a tool should stop, and ask

I built a sprite pipeline for my 2D engine and hit a wall: to swing a leg, you must first know which pixels are the leg. That is not a measurement. So the tool stops and asks the agent — and grades the answer. Updated with the parent-joint fix.

#machin #agents #game-dev #pixel-art #cli #tooling