Open Science's Provenance Engine Would Reject Its Own #1 Badge
A commit-pinned audit of aipoch/open-science: checksum-bound artifact provenance in the code, and a README #1 badge that sheds every hedge the org’s blog recorded a day earlier.
Fodev JEO
LATEST INVESTIGATIONS
Source audits & field notes
Apache Maka Tracks Its Agents' Screenshots and Ships None of Them
A commit-pinned audit of Apache Maka’s working-record boundary: agent PR evidence tracked in git, export-ignored from the ASF source archive, bound by tests in two languages.
OpenHarness Lets Its Allow List Outrank Your Deny Rules
A commit-pinned audit of the OpenHarness permission checker: its tool allow list returns before the command and path deny globs an operator configured.
diagram-design Hash-Locks Its Screenshots, Not Its Storefront
The 30.7k-star diagram skill CI-verifies eleven drift classes and pins screenshot digests. Its GitHub description still says 38 types while the tree says 39.
ECC Retired Six MCP Servers Over a Tax Its Catalog Still Pays
ECC’s connector policy says tool schemas tax every session, and it retired six defaults. Measured at commit 22e8cf01, its 286-skill catalog carries roughly 86 KB of metadata.
SIE's Public Repo Is an Export Surface, Not a Workshop
SIE’s changelog cites PR #478 while the public repo’s sequence stops at #248. Engine releases arrive as bot-authored squash syncs, and no .github directory exists at v0.7.2.
mjlab Source Audit: The Green Badge Proves the CPU Path
mjlab markets Isaac Lab ergonomics on MuJoCo Warp. The pinned tree shows CPU-only CI, benchmarks that record no hardware, and a second licence inside the package.
OpenMAIC Source Audit: The Agent Classroom Ships Pedagogy as Machine-Checked Constraint Files
OpenMAIC v1.0.0 promises a whole course from one prompt. The pinned source shows the real engineering: machine-checked teaching styles, frozen-failure evals, bounded inputs.
Archify Source Audit: The Viral Diagram Skill Is Really a Distrust Stack
Archify tops GitHub trending as a diagram skill, but the pinned source reveals a contract that distrusts its own agent, its models, and even its update server.
God's Eye View: The Viral Globe Is the Demo. The Boundaries Are the Product
A source audit of Bilawal Sidhu’s open-sourced satellite simulator: a 7,383-line key-broker server, a closed 28-tool voice-agent surface, and MIT that stops at the data.
인기 태그
Search article titles, categories, and tags. Full text is searched when needed.
Type to search articles.