AI 资讯
Write a Blast-Radius File Before Your First AI Patch
Your first AI patch should fail closed today. Do not ship a feature on day one. Prove one target file can revert cleanly now. You joined a messy repo this morning. The assistant wants a wide rewrite. Your job is a tiny reversible cut only. This drill gives you a blast-radius file first. You fill it before any model writes code. Then a short script checks the revert path. Why day-one AI diffs explode Cheap code is not cheap to unwind. One extra import can touch auth. One extra migration can lock deploys. You will not know the architecture yet. You also should not pretend otherwise. A blast-radius file makes unknowns explicit fast. If the file cannot name a revert, stop. You do not prompt for more code. You shrink the change until revert is boring. What you will build today You will add two artifacts on your branch. Keep both files in the first PR. blast_radius.py — the contract for this change. scripts/check_blast_radius.py — the fail-closed proof. The contract is the source of truth. The checker is the only merge gate. No green checker means no review yet. Step 1: Freeze one target file Pick one production file you can read. Do not pick a whole folder. Do not pick generated vendor code. git ls-files '*.py' '*.ts' '*.go' | head -n 40 TARGET = src/billing/invoice.py wc -l " $TARGET " git log -n 5 --oneline -- " $TARGET " Read the last five commits on that file. Write two plain sentences in notes. Pick a smaller file if you cannot yet. You now have a hard fence. Everything outside that fence is forbidden. Your assistant may not cross it. Step 2: Write the blast-radius contract Create blast_radius.py at the repo root. Keep the dict small. Fill every field with your own hands. # blast_radius.py # Day-one contract. Humans edit this. Models do not. BLAST = { " change_id " : " day-one-001 " , " intent " : " Add a fail-closed guard on invoice totals. " , " target_files " : [ " src/billing/invoice.py " , " tests/billing/test_invoice_flag_off.py " , " blast_radius.py " , " scr
AI 资讯
Don't Merge on Green: A Fixture Contract, a Pre-Push Hook, and a Merge Packet
A green required check is not a merge decision. It is a signal that one job graph finished without a red X. If a pre-push hook was skipped, or a snapshot fixture was regenerated without a reason, you can still ship a lie. This article walks through a merge packet: a small JSON artifact your CI publishes next to the check. The packet records hook results, fixture drift, and required-job status. A model may write the eight-line brief. It does not get a vote. Why green still lies CI dashboards collapse many facts into one glyph. You see green. You click merge. You miss three common failures. First, someone pushed with --no-verify and skipped the hook that keeps fixture hashes honest. Second, a test helper rewrote golden files because a serializer added a field. Third, a retry job went green on the second attempt and nobody recorded that the first attempt failed. You do not need a platform rewrite to catch this. You need a contract the merge button cannot ignore. Cheap code generation makes the second failure more common. When it is easy to regenerate tests, it is easy to regenerate the fixtures those tests pin. The pin becomes a moving target. Treat unexplained fixture diffs as merge blockers, the same way you treat a failed unit job. What the merge packet contains Keep the packet boring. One file. One schema. Commit it as a CI artifact, not as a comment that can be edited after the fact. { "commit" : "REPLACE_WITH_SHA" , "generated_at" : "2026-09-03T00:00:00Z" , "hooks" : { "pre_push_fixture_guard" : "passed" }, "fixtures" : { "manifest_path" : "tests/fixtures.sha256" , "changed_paths" : [], "unexplained_paths" : [] }, "required_jobs" : [ { "name" : "unit" , "conclusion" : "success" }, { "name" : "contract" , "conclusion" : "success" } ], "merge_ready" : false , "brief" : null } merge_ready is computed by a script you own. Not by a prompt. The brief is optional prose for humans who will not open the JSON. Step 1: Pin fixtures with a manifest Pick a directory you alrea
开源项目
🔥 qufei1993 / skills-hub - A cross-platform desktop app to manage Agent Skills in one p
GitHub热门项目 | A cross-platform desktop app to manage Agent Skills in one place and sync them to multiple AI coding tools’ global skills directories — “Install once, sync everywhere”. | Stars: 1,550 | 43 stars today | 语言: Rust
开源项目
🔥 espanso / espanso - A Privacy-first, Cross-platform Text Expander written in Rus
GitHub热门项目 | A Privacy-first, Cross-platform Text Expander written in Rust | Stars: 14,407 | 13 stars today | 语言: Rust
开源项目
🔥 LanRhyme / MicYou - MicYou is a powerful tool that turns your Android device int
GitHub热门项目 | MicYou is a powerful tool that turns your Android device into a high-quality microphone for your PC. | Stars: 3,511 | 155 stars today | 语言: Rust
开源项目
🔥 CapSoftware / Cap - Open source Loom alternative. Beautiful, shareable screen re
GitHub热门项目 | Open source Loom alternative. Beautiful, shareable screen recordings. | Stars: 21,565 | 108 stars today | 语言: Rust
开源项目
🔥 openreplay / openreplay - Session replay, cobrowsing and product analytics you can sel
GitHub热门项目 | Session replay, cobrowsing and product analytics you can self-host. Best for reproducing issues and iterating on your product. | Stars: 12,655 | 28 stars today | 语言: TypeScript
开源项目
🔥 averygan / reclip - Download videos from almost any website. Lightweight, self-h
GitHub热门项目 | Download videos from almost any website. Lightweight, self-hosted media downloader with a clean web UI. | Stars: 8,178 | 673 stars today | 语言: HTML
安全
Face Recognition Is Becoming the Norm for Dating Apps
To keep scammers at bay, dating apps are embracing biometric scanning tools and “verified human” badges. These moves are sparking concerns about surveillance and privacy.
AI 资讯
I Ran git reset --hard in the Wrong Window
git reset --hard HEAD~3 — run in the wrong repository window, at 6:40pm, immediately followed by the specific kind of silence that happens when you realize what you just did before your brain finishes processing it. Three commits of uncommitted-adjacent work, gone from the working tree in under a second. The first, most important fact: it's very likely still there git reset --hard moves the branch pointer and resets the working tree, but Git doesn't actually delete commit objects just because nothing points at them anymore — they sit in the object database, unreferenced, until garbage collection eventually cleans them up, which for most repos happens rarely enough that "eventually" can mean weeks. git reflog a1b2c3d HEAD@{0}: reset: moving to HEAD~3 e4f5g6h HEAD@{1}: commit: add retry logic to payment webhook 7h8i9j0 HEAD@{2}: commit: fix currency rounding k1l2m3n HEAD@{3}: commit: initial webhook handler The reflog is a local log of everywhere HEAD has pointed recently, and it survives a reset because a reset is just another entry in it, not an erasure of the ones before it. git reset --hard e4f5g6h Working tree restored to exactly the state before the reset, all three commits back, in the time it takes to read this sentence. When the reflog isn't enough If the commits were never made at all — you ran reset --hard on genuinely uncommitted changes — the reflog can't help, because it only tracks where HEAD and branches have pointed, not file contents that were never committed. That's a real loss, and the only real defense against it is committing early and often, including throwaway "wip" commits you intend to squash later, specifically because an uncommitted change has no recovery path at all. If the commits were committed and the reflog entry has expired — Git's default is to keep unreachable reflog entries for 90 days, reachable ones for longer — git fsck --unreachable can sometimes still find dangling commit objects directly: git fsck --unreachable --no-reflog |
AI 资讯
Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my!
From loop engineering to harnesses, squads, and open weights, the GitHub Podcast breaks down the AI terms showing up in developer conversations. The post Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my! appeared first on The GitHub Blog .
开源项目
🔥 elder-plinius / T3MP3ST - autonomous red teaming platform; multi-agent offensive-secur
GitHub热门项目 | autonomous red teaming platform; multi-agent offensive-security meta-harness | Stars: 5,934 | 257 stars this week | 语言: TypeScript
AI 资讯
How we make AI coding more cost efficient without sacrificing task quality
Why shorter outputs can cost more, and how GitHub Copilot reduces wasted work across the complete coding task. The post How we make AI coding more cost efficient without sacrificing task quality appeared first on The GitHub Blog .
开源项目
🔥 mlc-ai / web-llm - High-performance In-browser LLM Inference Engine
GitHub热门项目 | High-performance In-browser LLM Inference Engine | Stars: 18,711 | 64 stars today | 语言: TypeScript
开源项目
🔥 vercel-labs / portless - Replace port numbers with stable, named local URLs. For huma
GitHub热门项目 | Replace port numbers with stable, named local URLs. For humans and agents. | Stars: 11,517 | 69 stars today | 语言: TypeScript
开源项目
🔥 PDFMathTranslate / PDFMathTranslate - [EMNLP 2025 Demo] PDF scientific paper translation with pres
GitHub热门项目 | [EMNLP 2025 Demo] PDF scientific paper translation with preserved formats - 基于 AI 完整保留排版的 PDF 文档全文双语翻译,支持 Google/DeepL/Ollama/OpenAI 等服务,提供 CLI/GUI/MCP/Docker/Zotero | Stars: 36,617 | 55 stars today | 语言: Python
开源项目
🔥 zubair-trabzada / geo-seo-claude - GEO-first SEO skill for Claude Code. Comprehensive AI search
GitHub热门项目 | GEO-first SEO skill for Claude Code. Comprehensive AI search optimization for any website — citability scoring, AI crawler analysis, brand authority, schema markup, platform-specific optimization, and PDF reports. If you want learn how to sell this to real businesses, check out the skool community | Stars: 10,149 | 96 stars today | 语言: Python
开源项目
🔥 zyronon / TypeWords - Practice English, one strike, one step forward; 练习英语,一次敲击,一点
GitHub热门项目 | Practice English, one strike, one step forward; 练习英语,一次敲击,一点进步; | Stars: 9,207 | 68 stars today | 语言: Vue
开源项目
🔥 pacifio / atlas - Source control for agents. Use multiple coding agents, track
GitHub热门项目 | Source control for agents. Use multiple coding agents, track their changes and query them in one place | Stars: 2,657 | 895 stars today | 语言: Rust
开源项目
🔥 sngyai / Sequoia-X - A股自动选股系统 — 多种技术形态自动扫描,收盘后自动运行并推送飞书
GitHub热门项目 | A股自动选股系统 — 多种技术形态自动扫描,收盘后自动运行并推送飞书 | Stars: 5,919 | 195 stars today | 语言: Python