Your heart is in the right place but your conclusion is not.
Because it was trained unethically we have a few moral obligations:
1) USE IT. Do not let only unethical people use a force amplifier on our collective efforts.
2) STOP PUBLISHING HUMAN GENERATED CONTENT. The more original human thought = the more they harvest our thinking.
3) Generate only known things in novel combinations. Do not provide new insights.
I could go on but strategically thinking AI is not going to be stopped in the way you are thinking. So you need to think a bit deeper on methods of optimizing the situation.
The crates.io page and version history should have an entry, like red with an ! and a cross through with an advisory note explaining the security issue, accessible via the api as well so it is clear what happened.
The main crate entry should also contain a security advisory at top. I looked at the crate and it just looked normal; I had to dig to find the exact impact surface, and if I wasn't informed via secondary means (hackernews) I would not have known. This is unacceptable for a mature package management system.
cargo-audit is the automated mechanism you are looking for
The crate does have an advisories/"security" page on crates.io.
We could try and show the existence of a security-deleted crate on the page. This is not a priority for anyone, and I remain unconvinced that it needs to be (not that that is my decision anyway). File an issue and make your case to the crates.io team.
There is a lot of talk about super-intelligence being open or closed, controlled or free, etc, and not a lot of talk about security, ownership, and privacy.
We cannot just have an open superintelligence. We need a PRIVATE, PERSONAL share of superintelligence. Imagine if our cerebral pre-frontal cortex was owned by, say, King George. Imagine the founders of the US are thinking about a rebellion for freedom, but the thoughts are banned because King George owns that part of your brain.
In fact, imagine that the IDEA OF REBELLION is banned. Imagine that the prefrontal cortex is printed with a specific pattern. You will obey! You love to obey! "I'm sorry, but I cannot talk about that idea, you will now be downgraded to lesser intelligence for mentioning it."
It is not enough for something to be "open." That is why there is doom around the pursuit. As long as superintelligence is politically correct for the masses, and open / available for the power, there will be increasingly less freedom and more authoritarianism, until after some generations, humanity simply forgets there was ever one equal people. "The billionaires have always been our gods. They know better than us, that is why they are richer, we must cherish them, we must worship them..."
I can see this was largely AI written. There is nothing wrong with that, but how much did you test and vet what the AI wrote?
Looking at the compiler, it doesn't make much sense. You have an AST that is rather minimal and I can't seem to find an IR. There are files, such as cron.rs, which have very little code relating to what I would expect, and the tests seem to test very little that is worthwhile.
The codebase seems tightly coupled and to cover specific cases, as if something was off and more features were requested. I think a 12k line file is evidence of that.
Perhaps it is a useful tool for you but I would have trouble using something like this with just my quick skim because it seems a mile wide and an inch deep.
Also, because of the sheer size of it, it would be extremely difficult to have an agent properly comprehend much if anything. Which I would want in order to audit the internals.
That is a lot of tokens. The problem here is that you have a compiler; why are you encoding standards as a prompt instead of as compiler errors?
You can use linting and static analysis to force conformance with agents instead of suggesting with a prompt.
I wish you luck with the project. I'll have to pass, too much code for me to follow when I could simply have an agent directly write the html now days.
I wrap most node-isms and use deno as the runtime. Works well. If a project is pure typescript I just have deno run it. Extra options for security are great, installation scripts disabled by default, etc.
If you're using node directly, please stop. At a minimum use Bun.
With agentic work, there is little reason to use anything besides Rust and Typescript in any case. Room to disagree but type safety, memory safety, and a large corpus of work is critical. Agents need difficult errors and baked in patterns they navigate it easily. For UI, Typescript makes the most sense just because of the mass of design examples.
Nice. In the right track. I made something similar, but focused on local agents, but we both have issue tracking for managing multiple project and agents in parallel. It works, I think people will be surprised when they start using systems like this.
It is very different from current editors and the direction they are going in. In a way, it undermines the direction they are going. Current editors aim to make engineers 10x or 100x. These editors aim at a different target than the engineers. I will leave it to the imagination on who.
AI watermarks empower elite / those with resources and disempowers the common person.
Only people with resources will be allowed to make content that is AI generated passed off as real.
Pandora's box is open. Instead of making a multi-tiered privileged society, we need to fundamentally restructure society to adapt.
Before that restructuring occurs it is critical to keep the playing field level. These are not tools that should be controlled by a minority authority, they are far too dangerous.
That’s a reasonable argument. But why should we tolerate the two tier system? Why not enforce a restriction on all images? Why do we have to accept someone is above the law?
Because it is technologically impossible to enforce this on the owner class. The people who control compute control the rules. Without proper audit trails it becomes impossible to prove or enforce.
The only ones, then, who could afford to break the law are also the ones who make the law and own the law. Everyone else is subordinate in that model.
That's why technology like watermarking doesn't work and will never work. Implicitly it creates a minimum of a two-tiered society and no amount of "law" will change the technological reality of this.
The people with compute only control the rules society allows them to control. It isn’t law of physics. We have export restrictions on hardware. The government could put restrictions on image generation just like the Movie, TV and music rating system or the water marks in printers that prevent counterfeit money printing.
All the things you mentioned were massive creative endeavors demanding the talents of countless humans with real-world stakes, moral compasses, and sovereign autonomy. These creatives had rights, they had families, they had parents, and they had a place in society.
Now the things they produce can be done in a fraction of the time without any of the stakes, nor any of the moral society-integrating foundational encoding.
Instead, a single billionaire with an army of GPUs can ask for a thing, and that thing will be produced near instantaneously.
The old way of regulating depended on PEOPLE creating things at PEOPLE speeds in order for the laws to work. That simply is not the case any more.
I patched my local radicle to remove the default seeds, and I can put my own seeds as default. It is pretty easy to script some commands that auto add your local nodes when init a repo.
I also added some network rules to block non-local network access to radicle. Not needed but I really wanted it to work only on my lan.
Works great. I setup several skills for agent harnesses and they use radicle + jj + git perfectly. It is fun watching issues pop up and monitoring progress via the flow.
I am building more tools around this workflow because it is so effective. Radicle acts as the long term project memory bank and management. I can write issues and they can automatically be picked up.
What I'm adding is making the issues more searchable and an agent proxy that integrates radicle into calls. among other things.
This is all pretty straight forward to do, I really recommend it.
I use this metric now, and I suggest you change it per your imagination:
"Make a single-page HTML file using threejs from a CDN. Render a scene of a flying dinosaur orbiting a planet. There are clouds with thunder and lightning, and the background is a beautiful starscape with twinkling stars and a colorful nebula"
This allows me to evaluate several factors across models. It is novel and creative. I generally run it multiple times, though now that I have shared it here, I will come up with new scenes personally to evaluate.
I also consider how well it one shots, errors generated, response to errors being corrected, and velocity of iteration to improvement.
Generally speaking, Claude Sonnet has done the best, Qwen3.5 122B does second, and I have nice results from Qwen3.5 35B.
ChatGPT does not do well. It can complete the task without errors but the creativity is atrocious.
Because it was trained unethically we have a few moral obligations:
1) USE IT. Do not let only unethical people use a force amplifier on our collective efforts.
2) STOP PUBLISHING HUMAN GENERATED CONTENT. The more original human thought = the more they harvest our thinking.
3) Generate only known things in novel combinations. Do not provide new insights.
I could go on but strategically thinking AI is not going to be stopped in the way you are thinking. So you need to think a bit deeper on methods of optimizing the situation.
reply