bone@desk: ~/backbonebrief90×28 · utf-8 · no network calls
~ / categories / ai

AI

Local models, the interfaces in front of them, and agents you host yourself.

14 entriesjob to be done
summarylive
entries14
latest25 Oct
all jobs11
start here2
PracticesPlimsoll runs agent-written code, and every result states the isolation tier it actually got14 OctA self-hosted Go daemon that runs untrusted code, including code an AI agent wrote, and reports the isolation tier each run actually got — process, container, kernel or vm — refusing a run below the caller's stated floor before any code executes.
PracticesValet runs Claude Code and Codex in sandboxes you host6 OctA self-hosted control plane for cloud coding agents: per-thread containers, one compose file, accounts you connect yourself, and an unusually honest security note about what a sandbox can reach.
the rest12

1 story

Open WebUI 0.12.4 moves the image to Python 3.12 and tightens sharing

Open WebUI v0.12.4, published 25 October, rebuilds the Docker image on Python 3.12 and Debian 13, so pip packages inside the container need 3.12 support. It also makes Direct Integrations off actually disable saved tool servers, moves sharing changes into Access settings, and adds lazy skill loading plus visible context compaction.

4 min read

1 story

LiteLLM rotated its image-signing key, and the old pin will fail

LiteLLM's 24 October releases sign every Docker image and Helm chart with a new cosign key, remove the eMudhra root CA from its trust bundles, and mark both changes as present in 1.105.4, 1.104.6 and 1.103.8. If you pin the old public key in CI or an admission policy, verification fails until you replace it.

3 min read

1 story

LiteLLM 1.107.0 on PyPI was malware: a stealer in every wheel

All seven 1.107.0 wheels installed a credential stealer and a remote-code loader that run on every Python start in that environment, not just when LiteLLM runs. PyPI has removed the release and the affected Docker tags are yanked; anyone who installed it needs to rotate credentials, not just uninstall.

4 min read

1 story

2 stories

1 story

1 story

2 stories

2 stories

All categories · Browse by kind of story · Browse subjects

No trackers · no analytics · no third-party callsbackBone Brief · one operator, sources on the page