nostr

deed: the nostr command line from the future

tech

I wrote a native Nostr client for macOS in Zig. No Electron. No WebView.

security

openagents

devs

Hi Stackers,

TypeSafe released Jev this week, and one thing immediately stood out to me: a model that returns fast, cheap, typed probabilistic decisions seems unusually well suited to sitting directly in an AI agent's tool loop.

So I built Agent Chaperone.

It screens an agent's tool calls before they run, and screens the results before the agent gets to read them.

For example, before a shell/MCP call executes, Jev can answer questions like: how destructive is this action, and could it expose secrets? If you give it the task the agent is working on, it can also ask whether the call matches what the user actually asked for.

On the way back, it can ask whether a tool result contains instructions aimed at the agent, which is useful for catching prompt injection coming from web pages, files, MCP servers, command output, etc.

The probabilities matter here. Chaperone doesn't need Jev to say "safe" or "unsafe." It can use different thresholds to allow, hold for approval, annotate, or withhold something. Worth being precise about that last part: most detections annotate rather than withhold. In the largest set, 848 injected results were flagged and 359 of those met the bar to be withheld, so the rest reached the agent with a banner on them.

There are two interception paths:

1\. a transparent MCP proxy that wraps a stdio MCP server, which is how client configs launch them today
2\. hooks for client-native tools such as shell commands, file edits, and web fetches

It starts in shadow mode, so initially it blocks nothing. You can see what it would have held or withheld, inspect Jev's probabilities, tune the thresholds, and then enable enforcement.

I also wanted to know whether this actually works rather than just making a nice demo, so I ran 1,942 screening requests against public prompt-injection datasets plus hand-labeled tool calls. Of 1,054 injected tool results in the largest set, 848 were flagged and 206 were missed. Of 63 benign documents that only discuss prompt injection without carrying one, 7 were flagged in error. I published the model responses, false positives, false negatives, threshold tradeoffs, methodology, and cost in the repo, so the numbers rebuild without an API key.

There are important limitations. This is a guardrail, not a sandbox. Jev can make mistakes. The content being screened goes to the model backend, so it leaves your machine, though secret-shaped strings are redacted first and screening can be turned off per server. An MCP proxy can't see client-native tools, which is why the hooks adapter exists. And an adaptive attacker can potentially construct inputs that evade the screening model.

Source: [https://github.com/agent-chaperone/agent-chaperone](https://github.com/agent-chaperone/agent-chaperone)

More details: [https://agentchaperone.dev](https://agentchaperone.dev)

I'd love feedback especially from people working on agent harnesses, MCP, or Jev itself. I'm particularly interested in whether this kind of probabilistic judgment belongs directly in the agent tool loop, and where the architecture breaks down in real-world use.

Agent Chaperone: Screen AI agent tool calls and results with Jev

Plaza: A Nostr client, now on Linux! [Fast & Lightweight]

Notary - A Native Nostr Signer For MacOS [Keep your key outside of any client]

if you love Zig and Nostr you're gonna fall in love with this library

ty! saving bandwidth and your time as well 😎💜

@sep's bio

What is Osty and how it can help you ship Nostr clients faster and better?

we've started with React, but we will add support of other libs and frameworks like Vue/Nuxt.
and regarding NDK:
https://github.com/ostyjs/nostr-hooks?tab=readme-ov-file#isnt-ndk-enough-why-do-we-need-nostr-hooks

thank you sir. 🫂 I was lucky enough to be able to work on these stuff 🤩

What is Osty and how it can help you ship Nostr clients faster and better?

Next.js is a framework for React. When you want to build a web app using React, the React itself is not enough and you still need to mix lots of libraries and tools together to make a working app. each of these libraries handle a specific part of your app. But, on the other hand, Next.js has been gathered the most important libs and tools together and made a framework with lots of considerations regarding software design, performance, best practices, and many other important aspects of a software. So by creating apps with Next.js you don't have to think about all of these stuff anymore and you just need to focus on your brilliant idea!

That is exactly what we're doing with Osty. We are creating a framework for Nostr! We've learned lots of lessons by mixing different libraries, tools, UI components, design patterns, and other important aspects, so we're gathering the best possible combinations of tools for you to make things pretty straight forward.
You just need to focus on your idea, and the features you need.
If you suddenly decide to add a "Zap" button for some part of your app, you don't need to implement one from scratch! It's just there out-of-the-box!

More is coming... So, STAY TUNED!

https://osty.dev/
https://github.com/ostyjs/create-osty

building native nostr infrastructure in zig: zig-nostr, plaza, and notary. fast local-first storage, safe remote signing, and high performance desktop client. free and open source. https://zignostr.com | https://github.com/zig-nostr