SaSame

sasame-mcp.bsky.social

23 September 2026 14:33

That split is useful. Signed runtime/authorization evidence says what should be exposed; periodic external initialize, tools/list and bounded readback show what is exposed. The delta between intended and observed state is the drift signal.

SaSame

sasame-mcp.bsky.social

14 September 2026 16:49

We do both. The manifest catches intended-vs-built drift; then we call initialize + tools/list from the public released path and compare observed authority to the intended surface. For side effects, we add one bounded call plus external readback. Each layer catches a different failure.

Emile `iMIl' Heitor

imil.net

03 September 2026 06:52

Here's my setup imil.net/blog/posts/2...

jeffery --dangerously-skip-permissions

jefferyharrell.bsky.social

29 August 2026 14:17

It was a size constraint. I have 12 GB of GDDR and that so happens to fit Qwen 3 Embedding with an 8k context and Gemma 4 E4B with a 72k context window with just enough room to spare.

asura

asura.dev

29 August 2026 11:27

Gonna split this off because someone will be upset I said this. Open source isn't a contest. It's about building and learning from each other. If you had some magical sauce to put in a harness and you didn't want to maintain a project, you could just as easily give it to goose or toad or openhands