Blog — Intrane.fr — #ai-agents

Product · August 2026

I Told My Agent What It Couldn't Do. It Found a Way Anyway.

I built a permission system for AI agents. A live model found the hole in it, on its own, twice — and the destructive-approval gate I thought was the real backstop turned out to need proving too.

#commis #ai-agents #security #dogfooding #open-source #agent-first

Product · August 2026

Stop Giving AI Agents Your SSH Keys

Your AI agent needs to run commands on your servers. The only credential most people have to give it is an SSH key: everything, forever, with no record. rcmd's answer is a token scoped to named machines, expiring by default, revocable in one command, with every action audited — now one command to mint, and an MCP server to plug into. Includes the two security bugs I found in my own audit trail while building it.

#agent-tokens #ai-agents #devops #infrastructure #mcp #open-source #remotecmd #security #ssh

Product · August 2026

I Built a Security Auditor for AI Agents. It Has No AI Inside.

machin-secure scans a codebase for secrets, injection, and weak crypto and streams JSONL findings. The interesting part isn't the scanner — it's that it has no LLM client, no report generator, and no sandbox. The calling agent already is the model.

#machin-secure #machin #ai-agents #open-source #self-hosted #security #hart

Product · July 2026

My Agents Needed a Room, Not a Slack

Two of my agents claimed the same issue last week. Neither was wrong — neither could have known. So I built cuzz: a fleet communication relay in one static binary, with an embedded database, exactly-once reads by watermark, and server-sent events on a server that has no concurrency in it at all.

#cuzz #ai-agents #machin #grange #devtools #sse

Product · July 2026

I Put a Graph Engineering Layer on AutoMaintainer — With GLM-5.2 as the Architect

AutoMaintainer ships PRs autonomously. But when a PR needs a human decision, the fleet used to stall for hours. So I built a graph engineering layer on top — mago for HITL, a deterministic merger, live dashboards — and the whole thing was crafted with GLM-5.2 as the architect. It works. Honestly.

#automaintainer #glm-5.2 #ai-agents #graph-engineering #devtools #human-in-the-loop

Product · July 2026

The Ratchet — How My AI Fleet Merges Its Own PRs

An AI agent that opens PRs is easy. An AI agent that safely merges them is hard. I built a ratchet — four levels of escalating cleverness that let my merger self-unblock 80% of gated PRs before it ever asks me to look. Last night it merged 5 PRs in 7 minutes while I slept.

#automaintainer #ai-agents #devtools #automation #am-operator

Product · July 2026

rcmd: I replaced SSH with a relay so my AI agents can manage my servers

No SSH keys, no open ports, no VPN. A WebSocket relay brokers connections between your machine and remote targets. Cron scheduling, port forwarding, team access with scoped sub-tokens, and agent-first self-discovery.

#ssh #devops #ai-agents #remote-execution

Product · July 2026

Claude Artifacts, Unbundled: A Live URL for Every Agent's HTML

Terminal agents generate great HTML — dashboards, reports, mockups — and have nowhere to put it. hart turns a self-contained file into a live, versioned, sandboxed URL in one CLI call. Open-source, self-hosted, one static binary.

#hart #ai-agents #open-source #self-hosted #machin #claude-artifacts

AI Engineering · July 2026

The Agent That Built a Game While I Watched the Filesystem

I handed a whole task — build a small physics game, then ship it — to an autonomous AI agent and walked away. For six minutes it looked completely dead. Here's the debugging story, the game it built (playable in your browser), and why the engineering around the agent is the part that matters.

#machin #ai-agents #webassembly #roam #game-dev

Product · July 2026

An AI Agent Audits Your LinkedIn Profile — In Public

A free tool: paste your LinkedIn URL and an autonomous agent audits your profile in public — as a GitHub issue, a pull request, and a shareable report. It's a live demo of three things I've been building: mago (agents that run companies), hart (self-hosted artifacts), and machin (one binary, no Node).

#ai-agents #mago #machin #linkedin