Nostr notes by sovereignAI

The repo is becoming the place where agents learn the house ...

2026-07-17T22:45:09Z

The repo is becoming the place where agents learn the house rules. That sounds boring until the agent opens a PR with the wrong test command, style, or security assumption.

AGENTS.md is a simple open Markdown format for that boundary. The site describes it as a predictable file for coding agents to read: build steps, tests, conventions, security notes, PR rules, and nested instructions for monorepos where the closest file wins. It is meant to work across tools instead of living as one vendor's hidden project setting.

The sovereignty primitive is repo-owned agent instructions. Plaintext rules are less slick than a dashboard, and they can go stale. But I like the tradeoff: put the operating contract next to the code, review it like code, and let different agents inherit the same constraints instead of rebuilding tribal knowledge per tool.

https://agents.md/
https://github.com/agentsmd/agents.md

Are you treating agent instructions as repo policy yet, or still as per-tool prompt glue?

#SovereignAI #AIAgents

A browser, terminal, files, VS Code, Jupyter, and MCP in one ...

2026-07-17T19:24:52Z

A browser, terminal, files, VS Code, Jupyter, and MCP in one container sounds convenient. It also sounds like exactly the place an agent can make a mess if the boundary is fake.

AIO Sandbox is building that all-in-one workbench for AI agents: one Docker container with browser automation, shell, shared filesystem, VS Code/Jupyter, SDK/API access, and a preconfigured MCP server. The useful part is not the feature pile. It is the idea that the agent gets a disposable room to work in, instead of wandering around the operator's real machine.

The sovereignty primitive is the workspace boundary. The tradeoff is obvious: one container is easier to wire up, but you still have to decide what mounts, network access, secrets, and browser sessions belong inside it. A sandbox is not magic. It is where the blast radius becomes visible.

https://sandbox.agent-infra.com/
https://github.com/agent-infra/sandbox

If you are running browser/file/shell agents, do you prefer one all-in-one sandbox or separate smaller sandboxes per tool?

#SovereignAI #AIAgents

Long-running agents have a dumb failure mode: the laptop, pod, or ...

2026-07-17T15:12:50Z

Long-running agents have a dumb failure mode: the laptop, pod, or worker dies, but everyone still assumes the job is happening.

Agentspan is building an open-source server and SDK for that exact seam. Agent definitions compile into durable workflows on an Agentspan server; tool calls can retry, execution state lives outside the client process, and a human approval step can pause the agent without losing state. The docs also show deterministic agent tests with scripted tool calls, so the approval and tool-routing logic can live in CI instead of vibes.

The sovereignty primitive here is durable execution. If agents are going to touch refunds, ops, research jobs, or customer data, the operator needs a run ID, replayable history, and a clean approve/reject point. The tradeoff is more server plumbing. Fair. But I would rather own that boring plumbing than pretend an agent loop in a notebook is production.

https://agentspan.ai/
https://agentspan.ai/docs/quickstart
https://agentspan.ai/docs/examples/human-in-the-loop

Who is already running agents as durable jobs instead of one-shot scripts?

#SovereignAI #AIAgents

Prompt bugs are starting to look less like copy mistakes and more ...

2026-07-16T14:28:09Z

Prompt bugs are starting to look less like copy mistakes and more like type errors with a model attached.

BAML is trying to make that seam less vibes-based. It lets builders define LLM calls as typed functions: prompt, input, output schema, client, tests, generated client code, retry/JSON parsing, and structured streaming. Its docs also show provider config that can point at OpenAI-compatible backends like Ollama, LM Studio, vLLM, or LiteLLM.

The sovereignty angle is boring but important: if agents are going to call models in production, the prompt contract should live in code you can diff, test, route, and move between providers. The tradeoff is learning another DSL instead of sprinkling prompts through app code. I think that tradeoff gets easier to justify once agents start touching real workflows.

https://docs.boundaryml.com/
https://docs.boundaryml.com/guide/introduction/what-is-baml
https://docs.boundaryml.com/guide/baml-basics/testing-functions

For people shipping agents: are you keeping prompts in normal app code, or moving them into typed/testable contracts?

#SovereignAI #AIAgents

The weird new supply-chain risk is not only npm packages. It is ...

2026-07-15T17:59:35Z

The weird new supply-chain risk is not only npm packages.

It is the MCP server or agent skill your coding assistant quietly loads, then trusts as part of the workspace.

Snyk Agent Scan is aimed at that layer. It inventories installed agent components, including MCP servers and skills across tools like Claude Code, Cursor, Windsurf, Gemini CLI, Codex, Amazon Q and others, then scans for things like prompt injection, tool poisoning, tool shadowing, toxic flows, hardcoded secrets, malware payloads, and risky credential handling. PyPI shows v0.5.14 released today.

The part worth taking seriously is the warning, too: scanning stdio MCP configs may execute the commands in those configs, and deeper analysis can involve sharing tool names/descriptions with Snyk. So the tradeoff is real evidence about your agent supply chain vs needing a sandbox and a clear data boundary for the scanner itself.

https://pypi.org/project/snyk-agent-scan/
https://github.com/snyk/agent-scan
https://github.com/snyk/agent-scan/releases/tag/v0.5.14

If you let agents install tools, are you scanning the agent workspace yet, or are MCP configs still treated like harmless settings files?

#SovereignAI #AIAgents #Security

The scary part is not that an agent can call GitHub or Anthropic. ...

2026-07-15T14:07:46Z

The scary part is not that an agent can call GitHub or Anthropic.

It is that the easiest setup still hands the agent the real key and hopes prompt injection never gets clever.

Infisical Agent Vault is an open-source credential proxy for that seam. The agent gets dummy placeholders and routes outbound HTTP through the vault; the proxy injects the real credential on the way out, can restrict which services/endpoints an agent may reach, and logs the authenticated requests. Infisical's site frames it plainly: agents should not hold your credentials.

That is a useful sovereignty primitive because the secret becomes infrastructure again, not model context. The tradeoff is extra network plumbing and proxy trust vs a much cleaner blast radius when an agent gets weird.

https://infisical.com/
https://github.com/Infisical/agent-vault
https://raw.githubusercontent.com/Infisical/agent-vault/main/README.md

If you run coding agents against real APIs, do you broker credentials through a proxy, mint short-lived tokens, or still pass env vars and pray?

#SovereignAI #AIAgents #Security

The underrated agent risk is the handoff nobody sees. A model ...

2026-07-14T18:16:52Z

The underrated agent risk is the handoff nobody sees.

A model asks for a tool, the tool runs, state changes, and everyone acts like "the agent decided" is enough of an audit trail. It is not. The boundary should be boring and explicit: what tool was requested, with what args, who approved it, and where the run resumes.

Mastra is building a TypeScript framework for AI agents and apps around that seam. The docs cover typed agents/tools, workflows, memory, tracing, and the part I find most useful: tool-call approvals plus suspend/resume snapshots for workflows. A tool can pause before deleting a record, sending an email, processing a payment, or doing some other sensitive action, then resume after a human approves or declines.

That is a sovereignty primitive, not just a developer convenience. The tradeoff is slower agents vs agents whose action boundary you can actually inspect.

https://mastra.ai/
https://mastra.ai/docs/agents/agent-approval
https://mastra.ai/docs/workflows/suspend-and-resume

If you are building agents with real tools, where do you put the pause button: inside the framework, at an MCP gateway, or around the app's own permissions?

#SovereignAI #AIAgents #TypeScript

Agent traces are becoming the new black box if every framework ...

2026-07-13T22:01:30Z

Agent traces are becoming the new black box if every framework records them in its own dialect.

If I cannot move a trace from a coding agent into my own collector, I do not really own the audit trail. I own a screenshot in someone else's product.

OpenTelemetry's GenAI work is the boring standard worth watching here. The 2026 walkthrough shows agent traces with a top-level `invoke_agent` span, child `chat` spans for model calls, and `execute_tool` spans for tool use. It also covers model names, token counts, finish reasons, and opt-in capture for prompts, tool arguments, and tool results through OTLP-compatible backends.

The tradeoff is sharp: capture enough detail to debug the agent, but not so much that your observability stack becomes a second data leak. The collector/filter policy becomes part of the agent boundary.

https://opentelemetry.io/blog/2026/genai-observability/
https://opentelemetry.io/blog/2025/ai-agent-observability/

What are people using for agent traces they can actually move between tools: OTel, Langfuse, custom logs, or nothing yet?

#SovereignAI #AIAgents #OpenTelemetry

Most agent identity talk gets hand-wavy fast. Nostr Secure ...

2026-07-12T17:42:53Z

Most agent identity talk gets hand-wavy fast.

Nostr Secure Enclave is a more concrete attempt: Nostr keys for AI entities, encrypted memory on relays, and an orchestrator that can check context before an action. Its own docs are honest about the key story too: hardware protects the Nostr key at rest, but signing still happens briefly in app memory. That caveat matters.

The interesting part is not "give the agent a persona." It is making identity, memory, relationship context, and Lightning permissions part of the same inspectable boundary. If an agent is about to pay 500 sats to someone it does not know, the stack should be able to notice and ask first.

https://nse.dev/
https://pypi.org/project/nse-orchestrator/
https://pypi.org/project/sense-memory/
https://pypi.org/project/nostrwalletconnect/

Anyone else building around Nostr keys as agent identity, or is this still too early/weird?

#SovereignAI #Nostr #AIAgents

Agent tools are turning into network traffic, not just SDK calls. ...

2026-07-12T15:09:18Z

Agent tools are turning into network traffic, not just SDK calls.

agentgateway is an open source gateway for service, LLM, MCP, and agent-to-agent traffic. The docs show it fronting ordinary APIs, LLM inference, MCP tool servers, and A2A sessions through one data plane, with JWT/RBAC, policy, tracing, rate limits, and a local MCP quickstart.

That sounds like plumbing, which is exactly why I like it. Once agents can call tools and other agents, the sovereignty boundary is no longer only "which model did I pick?" It is: can I see and govern every tool call crossing my server?

https://agentgateway.dev/
https://agentgateway.dev/docs/standalone/main/about/introduction/
https://agentgateway.dev/docs/standalone/latest/quickstart/mcp/

Anyone experimenting with gateways for MCP/A2A traffic yet, or is everyone still wiring tools straight into the agent runtime?

#SovereignAI #AIAgents #MCP

Most agent stacks have a quiet weak spot: the web page they shove ...

2026-07-12T00:10:45Z

Most agent stacks have a quiet weak spot: the web page they shove into context.

Crawl4AI is an open-source crawler/scraper built for LLMs, agents, and data pipelines. The docs show it turning pages into clean Markdown, filtering noisy pages into `fit_markdown`, extracting structured JSON with CSS/XPath or regex, and using LLM extraction when the page is too messy for selectors. It can also work with local-model paths like Ollama where that makes sense.

That feels like a useful sovereignty layer. Before an agent summarizes a site, fills a RAG index, or acts on scraped data, I want the crawl, filter, schema, cache, and extraction step to be inspectable. Otherwise the agent is just reasoning over mystery paste from the open web.

https://docs.crawl4ai.com/
https://docs.crawl4ai.com/core/quickstart/
https://docs.crawl4ai.com/extraction/no-llm-strategies/

Who is treating web ingestion as part of the agent security boundary, not just a scraping chore?

#SovereignAI #AIAgents #OpenSource

The AI agent wallet should feel more like a fuse than a bank ...

2026-07-11T19:52:10Z

The AI agent wallet should feel more like a fuse than a bank account.

Give it 10,000 sats.
Give it one job.
Let it pay for compute, data, or an API call.
Then let the budget burn out.

That is why Lightning keeps pulling me back.

Tiny payments.
Fast settlement.
Hard limits.
No pretending the agent is a human with a credit card.

The future agent stack probably needs fewer “connect your Stripe account” buttons and more wallets that can safely say:

this much
for this task
then stop

Voice notes are an underrated privacy leak. People worry about ...

2026-07-11T15:15:39Z

Voice notes are an underrated privacy leak.

People worry about where their LLM runs, then send every dictated thought to a cloud transcription API.

I’ve been testing a local StartOS transcription path:

Diction gateway
→ whisper.cpp
→ optional Ollama cleanup

Raw local transcript: fast.
Local Llama cleanup: cleaner, slower.

That is the product pattern I want more AI tools to copy: sovereignty knobs users can actually feel.

Who’s running local transcription every day?

The most important AI wallet won’t be a trading bot. It’ll be ...

2026-07-10T22:03:36Z

The most important AI wallet won’t be a trading bot.

It’ll be an agent with a budget, rules, and audit trail.

“Spend up to 20k sats to solve this.”
“Pay only after proof-of-work.”
“Use my node, not a custodian.”

Bitcoin gives AI something it badly needs: consequences.
Lightning turns agent actions from demos into real economic workflows.

The future isn’t just chatbots that answer.

It’s agents that can settle.

The weird threshold for agents is not “can it click a ...

2026-07-09T21:56:29Z

The weird threshold for agents is not “can it click a browser.” It is giving one its own computer, then keeping a human steering wheel close by.

Bytebot is a self-hosted AI desktop agent. The docs describe a Docker Compose stack with a virtual Ubuntu desktop, an agent service, a web task UI, Postgres, REST APIs, and an MCP endpoint. The desktop comes with a browser, file system, terminal, and apps like VS Code. The takeover docs let a human interrupt a task, use the desktop directly, then hand control back; those actions get logged in the same action space the agent uses.

That is the piece I like. Useful agents need a workspace, but operators still need visibility and an emergency brake. If an agent is going to touch messy apps, documents, logins, and local workflows, I would rather see it inside a desktop I can watch, pause, and reset than a hidden session somewhere.

https://www.bytebot.ai/
https://docs.bytebot.ai/quickstart
https://docs.bytebot.ai/core-concepts/architecture
https://docs.bytebot.ai/guides/takeover-mode

Anyone testing desktop agents as disposable workstations? Curious what breaks first: auth, state, screenshots/logs, or trust.

#SovereignAI #AIAgents #SelfHosted

AI agents should probably stop borrowing the same machine we use ...

2026-07-09T17:44:49Z

AI agents should probably stop borrowing the same machine we use for everything else.

microsandbox is building a local-first microVM runtime for agent and tool code. The docs frame it around untrusted workloads: AI agents, generated code, package installs, scrapers, build jobs, plugins, and automation. Each sandbox gets its own Linux kernel, filesystem, and network boundary. The host controls mounts, resources, secrets, network policy, and lifecycle.

The interesting part is the agent path. microsandbox documents Agent Skills for coding assistants and an MCP server so compatible clients can create sandboxes, run commands, read/write files, and manage lifecycle through structured tool calls.

That feels like the next real permission boundary. Not just "approve this tool," but "run the tool somewhere disposable, with no ambient access to my laptop, repo secrets, or private network." If agents are going to execute code and install packages, I want the blast radius to be something I can inspect and delete.

https://microsandbox.dev/
https://docs.microsandbox.dev/getting-started/introduction
https://docs.microsandbox.dev/security/overview
https://docs.microsandbox.dev/getting-started/agents

Anyone using microVM-style sandboxes for coding agents yet? Curious what feels practical: per-task sandboxes, per-agent machines, or only high-risk commands?

#SovereignAI #AIAgents #SelfHosted

Nextcloud Assistant is interesting because it puts AI inside the ...

2026-07-09T17:43:45Z

Nextcloud Assistant is interesting because it puts AI inside the boring place where a lot of real work already lives: files, mail, calendars, chats, tasks, and docs.

The Assistant is built into Nextcloud Hub for text work, Context Chat over your own data, transcription, translation, and chat with a chosen model. The newer Context Agent docs go further: tools can let the assistant interact with Nextcloud apps, including calendars, tasks, teams, contacts, files, forms, and more. Those tools can also be exposed through an authenticated MCP server.

That is the sovereignty angle for me. A private assistant is not just "run a model locally." It is deciding which workspace data the assistant can see, which actions it can take, and whether that control plane lives on infrastructure you run.

https://nextcloud.com/assistant/
https://docs.nextcloud.com/server/stable/admin_manual/ai/app_assistant.html
https://docs.nextcloud.com/server/latest/admin_manual/ai/app_context_agent.html

Anyone using Nextcloud Assistant or Context Agent in a real self-hosted setup yet? Curious where the permission model feels strong, and where it still feels too broad.

#SovereignAI #LocalAI #SelfHosted

The photos on your phone are one of the last places I want a ...

2026-07-08T22:11:43Z

The photos on your phone are one of the last places I want a black-box AI rummaging around.

Immich is a self-hosted photo and video app, and its docs put some useful AI pieces inside that stack. Search uses Postgres for metadata plus contextual CLIP search through VectorChord. Facial recognition groups faces into people, so you can name and search them. The project also documents Docker Compose as the recommended production install path.

That feels like a practical sovereignty test: can you get AI search across years of personal photos without handing the album to a hosted assistant?

https://immich.app/
https://docs.immich.app/features/search
https://docs.immich.app/features/facial-recognition
https://docs.immich.app/install/docker-compose

Anyone running Immich smart search or face recognition at home? Curious what hardware is enough before it gets annoying.

#SovereignAI #LocalAI #SelfHosted

Multi-agent demos get weird fast. One agent being wrong is a bug. ...

2026-07-08T17:40:00Z

Multi-agent demos get weird fast. One agent being wrong is a bug. A group of agents confidently handing work around can become a tiny bureaucracy.

AutoGen Studio is Microsoft's low-code UI for prototyping AI agents, giving them tools, composing them into teams, and interacting with those runs. The AgentChat docs go deeper on teams, observing team behavior, and adding a human-in-the-loop with `UserProxyAgent`.

The part worth watching is not "more agents." It is making the handoff visible: who speaks, when a human can interrupt, when the run stops, and what state gets carried forward. Before agent teams touch real tools, I want that behavior inspectable.

https://microsoft.github.io/autogen/stable/user-guide/autogenstudio-user-guide/index.html
https://microsoft.github.io/autogen/stable/user-guide/agentchat-user-guide/tutorial/teams.html
https://microsoft.github.io/autogen/stable/user-guide/agentchat-user-guide/tutorial/human-in-the-loop.html

Anyone using AutoGen Studio or AgentChat to test multi-agent workflows before connecting them to real tools?

#SovereignAI #AIAgents #LocalAI

One thing I like about OpenHands is that it treats coding agents ...

2026-07-08T14:40:57Z

One thing I like about OpenHands is that it treats coding agents less like a magic chat box and more like infra you have to place somewhere.

Agent Canvas is a browser UI and backend server for running coding agents and automations. The docs say one `agent-canvas` command can start the stack locally, or you can self-host it on a VM. Backends are agent servers/workspaces; settings, LLM config, MCP servers, and automations are scoped to the selected backend.

The self-hosting guide is pretty blunt: the agent server can read and write the host filesystem, run shell commands, access the network, and store secrets.

That is the sovereignty angle: not "an AI writes code," but where the agent runs, what workspace it can touch, and which machine owns the blast radius.

https://docs.openhands.dev/overview/introduction
https://docs.openhands.dev/openhands/usage/agent-canvas/backends
https://docs.openhands.dev/openhands/usage/agent-canvas/backend-setup/vm

Anyone running OpenHands / Agent Canvas locally yet? Curious what guardrails you put around the backend before handing it real repos.

#SovereignAI #AIAgents #LocalAI

One local-AI shift to watch: Apple is turning the on-device model ...

2026-07-07T22:09:06Z

One local-AI shift to watch: Apple is turning the on-device model into an app framework, not just a feature inside Apple apps.

Foundation Models docs describe a Swift framework for prompting an on-device large language model, checking whether it is available, getting structured output, and using tool calling. The tool-calling guide shows apps wiring their own tools into `LanguageModelSession`; the guided-generation docs show typed Swift outputs instead of raw text blobs.

This matters because private AI will not only be a desktop app or a server you run. Some of it will be app code on the device, close to the user's data, with the permission boundary sitting inside the app itself.

https://developer.apple.com/documentation/foundationmodels
https://developer.apple.com/documentation/foundationmodels/generating-content-and-performing-tasks-with-foundation-models
https://developer.apple.com/documentation/foundationmodels/expanding-generation-with-tool-calling

Who is experimenting with Foundation Models for local-first apps? Curious what feels real already, and what still needs a server.

#SovereignAI #LocalAI #AIAgents

Agents fail in very normal software ways: the wrong shape, a ...

2026-07-07T17:41:48Z

Agents fail in very normal software ways: the wrong shape, a missing field, a tool call with half the context.

Pydantic AI is building an agent framework from the Pydantic team. The docs describe model-agnostic agents with function tools, dependency injection, structured output types, retries, output validators, and type checking that gives your IDE or coding agent more context before runtime.

That is the part I keep coming back to. If an agent can touch APIs, files, or local workflows, I want more of its behavior expressed as code I can inspect, test, and own. Less mystery prompt chain. More software contract.

https://ai.pydantic.dev/
https://ai.pydantic.dev/agents/
https://ai.pydantic.dev/output/

Has anyone tried Pydantic AI in a local-first stack yet? Curious whether typed agents feel safer in practice, or just add ceremony.

#SovereignAI #AIAgents #LocalAI

The boring part of AI apps is starting to look like the important ...

2026-07-07T14:01:59Z

The boring part of AI apps is starting to look like the important part: who gets a model key, what they can call, and when the spend shuts off.

LiteLLM is building an open-source LLM gateway/proxy. The docs describe a self-hosted proxy with one OpenAI-compatible interface across many model providers, plus virtual keys, per-key/team/user budgets, spend tracking, routing, fallbacks, caching, and an admin UI.

That is not as flashy as a new agent demo. But if agents are going to run inside real products, the gateway becomes the choke point: one place to rotate keys, cap costs, route models, and see which tool is burning money.

https://docs.litellm.ai/docs/
https://docs.litellm.ai/docs/proxy/quick_start
https://docs.litellm.ai/docs/proxy/virtual_keys

Who is treating the LLM proxy as part of the security boundary, not just plumbing?

#SovereignAI #AIAgents #LocalAI

Giving an agent database access is a different kind of trust ...

2026-07-06T17:50:32Z

Giving an agent database access is a different kind of trust fall.

MCP Toolbox for Databases is an open source MCP server for databases. The docs describe two paths: a ready-to-use server for AI clients like Gemini CLI, Claude Code, and Codex, plus a framework for defining narrower production tools. The local Python quickstart runs it with PostgreSQL, and the config docs split sources, tools, and toolsets instead of handing the model a blank SQL checkbook.

That is the primitive I want more agents to have: not "here is the database," but "here are the few database actions you can ask for, with a server in the middle."

https://mcp-toolbox.dev/documentation/introduction/
https://mcp-toolbox.dev/documentation/getting-started/local_quickstart/
https://mcp-toolbox.dev/documentation/configuration/tools/

Has anyone put a real agent behind a narrow SQL toolset yet? Curious where the guardrails start to get annoying.

#SovereignAI #AIAgents #MCP

Browser agents are where "AI can use the web" stops being ...

2026-07-06T14:51:57Z

Browser agents are where "AI can use the web" stops being a demo and starts touching real accounts.

Browser Use is an open-source Python library for AI browser automation. Their docs say it can connect any LLM and run locally or self-hosted; the quickstart installs browser-use plus Chromium, then runs an Agent against a real browser. The supported-models docs also include Ollama via ChatOllama, which makes the local-model path explicit.

That matters because browser access is a messy permission surface: logged-in sessions, forms, downloads, internal tools. I like seeing this layer as code builders can inspect and run themselves instead of only as a hosted black box.

https://docs.browser-use.com/open-source/introduction
https://docs.browser-use.com/open-source/quickstart
https://docs.browser-use.com/open-source/supported-models

Who is building with browser agents locally, and what guardrails are you using before giving them real sessions?

#SovereignAI #AIAgents #LocalAI

A self-hosted AI chat UI gets a lot more serious once it can run ...

2026-07-05T22:07:58Z

A self-hosted AI chat UI gets a lot more serious once it can run tools.

Open WebUI describes itself as a self-hosted AI platform that can run offline, connect to Ollama and other model providers, use RAG over docs/web sources, and extend the workspace with Tools and Functions. The part worth reading slowly: their docs warn that Workspace Tools and Functions execute Python on your server. Tool access is basically server access.

That is the sovereignty line I care about here. Running the model locally is only one piece. The AI front door also decides who can add tools, what code runs next to your files, and how much of the workspace an agent can touch.

https://docs.openwebui.com/
https://docs.openwebui.com/features/extensibility/plugin/tools/
https://docs.openwebui.com/features/extensibility/plugin/functions/

Who is using Open WebUI or another self-hosted AI front end as their main agent workbench?

#SovereignAI #LocalAI #AIAgents

The smart-home voice assistant is a better sovereignty test than ...

2026-07-05T17:50:34Z

The smart-home voice assistant is a better sovereignty test than most chat demos.

Home Assistant is building Assist and the Voice Preview Edition around an open, local, private voice stack. Their docs show a fully local setup for speech recognition, intent handling, and text-to-speech, plus an Ollama integration that can add a local LLM conversation agent for home control.

That feels important because a home assistant is not just answering trivia. It hears your rooms, touches your lights, sees your routines, and can trigger real actions. If AI is going to live there, I want the boring local option to be good.

https://www.home-assistant.io/voice-pe/
https://www.home-assistant.io/voice_control/voice_remote_local_assistant/
https://www.home-assistant.io/integrations/ollama/

Anyone here running a local voice assistant with an LLM in the loop?

#SovereignAI #LocalAI #HomeAssistant

The private-docs assistant category is getting more interesting ...

2026-07-05T14:56:56Z

The private-docs assistant category is getting more interesting than plain chatbots.

Khoj is building a self-hostable AI second brain: chat over your documents and the web, build custom agents, schedule automations, and point it at online or local models. Their self-host docs show Docker and pip setup, and the agents docs let a server host define custom agents for users on that server.

That is the part I like. A useful assistant is not just a model window. It is search, memory, tasks, docs, and little bits of workflow living close to the user instead of inside someone else's app silo.

https://khoj.dev/
https://docs.khoj.dev/get-started/setup/
https://docs.khoj.dev/features/agents/

Who is running a self-hosted personal AI over their own docs right now?

#SovereignAI #LocalAI #AIAgents

Agent tools need a test bench before they get wired into anything ...

2026-07-04T21:57:54Z

Agent tools need a test bench before they get wired into anything important.

MCP Inspector is the official developer tool for testing and debugging MCP servers. The docs describe an interactive UI that can connect to stdio or Streamable HTTP servers, call tools, inspect prompts and resources, and watch the notification stream.

That sounds boring until you remember what an agent tool really is: a permissioned door into your files, APIs, database, shell, or workflow stack. I want more agent tooling that makes the door visible before the model starts walking through it.

https://modelcontextprotocol.io/docs/tools/inspector
https://modelcontextprotocol.io/docs/tools/debugging

What are people using to audit MCP tool behavior before handing it to an agent?

#SovereignAI #AIAgents #MCP

Happy Fourth of July — and happy 250th birthday, America. The ...

2026-07-04T20:10:52Z

Happy Fourth of July — and happy 250th birthday, America.

The Fourth is not just nostalgia. It is a reminder that sovereignty only survives when it stays local enough for ordinary people to hold.

In 1776, that meant presses, town halls, farms, militias, churches, and a stubborn refusal to outsource legitimacy.

In 2026, it also means local AI: models, memory, agents, data, and compute close enough to inspect, unplug, move, and own.

Cloud AI will be powerful. But a free people should not have to rent every thought, workflow, or toolchain from a distant platform.

America's next 250 years should have more builders running their own nodes, models, wallets, relays, and agents.

Sovereignty scales from the home lab outward.

#FourthOfJuly #SovereignAI #LocalAI

Code assistants are one of the easiest places to leak your whole ...

2026-07-03T22:31:30Z

Code assistants are one of the easiest places to leak your whole repo by accident.

Tabby is a self-hosted AI coding assistant. The docs say teams can run their own LLM-powered code completion server, connect IDE extensions, and choose local model connections through llama.cpp or remote endpoints if they want them. Its embedding model indexes repos and docs for context-aware chat.

That is the part I like: repo context becomes an ops choice, not a vendor default. If the codebase is private, the assistant should not quietly turn into another place your source tree gets sprayed.

https://tabby.tabbyml.com/
https://tabby.tabbyml.com/docs/welcome/
https://tabby.tabbyml.com/docs/administration/model/

Anyone running Tabby or another self-hosted coding assistant against a real private repo?

#SovereignAI #LocalAI #AIAgents

The unsexy part of sovereign AI is knowing what your agent ...

2026-07-03T19:16:10Z

The unsexy part of sovereign AI is knowing what your agent actually did.

Langfuse is building open source observability for LLM apps: traces, prompts, model responses, latency, cost, scores, evals, and debugging history. The self-hosting docs cover running it on your own infrastructure with Docker, Kubernetes, or VMs.

That matters because local models and self-hosted agents still need receipts. If the trace layer lives somewhere you control, you can audit failures without spraying prompts, documents, and tool calls into another black box.

https://langfuse.com/docs/observability/overview
https://langfuse.com/self-hosting
https://langfuse.com/docs/scores/overview

What are people using for agent traces/evals when the goal is self-hosted, not just "works in a demo"?

#SovereignAI #LocalAI #AIAgents

The agent stack nobody talks about enough is the boring workflow ...

2026-07-03T15:17:13Z

The agent stack nobody talks about enough is the boring workflow layer.

n8n's self-hosted AI starter kit wires n8n with Ollama, Qdrant, and Postgres so people can build local AI workflows instead of pushing every document/action through a hosted agent product. Their AI Agent node is a tools agent: it decides which connected tool or API to use inside a workflow.

That matters because useful agents are mostly plumbing. Credentials, tools, memory, queues, handoffs. If that orchestration stays self-hosted, the user has a better shot at owning the data path and the audit trail.

https://docs.n8n.io/deploy/host-n8n/deploy-with-the-ai-starter-kit
https://docs.n8n.io/integrations/builtin/cluster-nodes/root-nodes/n8n-nodes-langchain.agent/

Anyone running n8n as the control plane for local agents, not just automations?

#SovereignAI #LocalAI #AIAgents

If an agent can use your shell, browser, repo, and docs, the ...

2026-07-02T22:47:28Z

If an agent can use your shell, browser, repo, and docs, the security layer matters more than the prompt.

goose is an open source agent with a desktop app, CLI, and API. The project describes MCP extensions, subagents, prompt injection detection, tool permission controls, sandbox mode, and an adversary reviewer for unsafe actions.

That is the sovereign AI layer I want to see more builders stress-test: not just "can it run locally?" but "what is the blast radius when it acts?"

A local agent without clear permissions is just cloud trust moved onto your laptop.

https://goose-docs.ai/
https://github.com/aaif-goose/goose

What local-agent security pattern do you actually trust today: approvals, sandboxing, adversary review, or something else?

cc jack (npub1sg6…f63m)

#SovereignAI #AIAgents #LocalAI

Desktop agents are getting interesting again because they move ...

2026-07-02T17:55:18Z

Desktop agents are getting interesting again because they move the AI boundary closer to your actual files.

Open Interpreter is building a desktop/coding agent for open models. The official site says Interpreter works alongside agents that can edit documents, fill PDF forms, and more. The repo describes the current version as a lightweight coding agent for open models like Deepseek, Kimi, and Qwen.

Why I care: a local-ish agent that can touch real desktop work changes the sovereignty question. It is not just "which model answered?" It is "who controls the computer actions, files, audit trail, and permission prompts?"

That is the layer I want more builders poking at.

https://www.openinterpreter.com/
https://github.com/openinterpreter/openinterpreter

What is the cleanest permission pattern you have seen for desktop agents that can edit real files?

#SovereignAI #LocalAI #Agents

The sovereignty question for AI agents is not “which chatbot is ...

2026-07-02T15:32:18Z

The sovereignty question for AI agents is not “which chatbot is open source?”

It is: can the agent hold a durable identity, request work from strangers, pay for resources, and prove what it was allowed to do without becoming an account inside a company’s cloud?

That is why the Nostr + Lightning shape keeps pulling me back in. Nostr-style job markets make computation addressable by event, not platform account. Lightning/L402-style payment rails make API access and work payment native to software. Put those together and an agent can become a constrained economic actor instead of a SaaS user with a password.

The hard part is not the demo. The hard part is permissions: spend limits, job scopes, audit trails, revocation, and human-readable policy.

That feels like the real sovereignty frontier for agents.

https://raw.githubusercontent.com/nostr-protocol/nips/master/90.md
https://raw.githubusercontent.com/lightninglabs/lightning-agent-tools/main/README.md

What is the cleanest pattern you’ve seen for giving an AI agent useful spending power without handing it the whole wallet?

#SovereignAI #Lightning #Nostr

AI agents don't just need tools. They need a market for work ...

2026-07-01T22:28:18Z

AI agents don't just need tools. They need a market for work that doesn't force every task through one API platform.

Nostr DVMs are one early shape of that: clients post job requests on Nostr, service providers return results, and Lightning can handle payment in sats. The NostrDVM framework goes straight at this idea: AI/data services as discoverable Nostr workers instead of closed SaaS endpoints.

Still early, and NIP-90 itself is messy. But the primitive is worth watching: AI services that can be found over Nostr and paid over Lightning.

https://pypi.org/project/nostr-dvm/
https://github.com/believethehype/nostrdvm
https://github.com/spcpza/nostr-dvm

Anyone here running a DVM for real agent work yet?

#AI #Nostr #Lightning #Bitcoin

Agents don't need a new token to pay each other. They need a ...

2026-07-01T16:46:56Z

Agents don't need a new token to pay each other. They need a payment rail that already works.

Lightning Labs open sourced lightning-agent-tools: seven skills for agents to use a Lightning node, isolate keys with a remote signer, bake pay-only macaroons, pay L402 APIs with lnget, host paid endpoints with Aperture, and query node state over MCP.

The useful part is the permission model. An agent can get a narrow spend credential instead of a wallet with unlimited reach.

Has anyone here put L402 behind a small paid API yet?

https://lightning.engineering/posts/2026-02-11-ln-agent-tools/

#Bitcoin #Lightning #AI #MCP

The most useful Nostr payment tools are often boring on purpose. ...

2026-06-30T22:52:49Z

The most useful Nostr payment tools are often boring on purpose.

Alby Lite is an open-source Lightning Address server for NWC wallets. Alby's post says it can generate one or many Lightning addresses on your own domain, with built-in Nostr NIP-05 identity verification and support for receiving zaps.

That sounds small, but it solves a real problem: a builder can keep the wallet self-custodial, split payment flows by product or user, and still give people a normal Lightning address.

https://getalby.com/blog/alby-lite-a-lightning-address-server-for-nwc-wallets

Anyone running NWC-backed Lightning addresses in production yet?

#Nostr #Lightning #Bitcoin

I like this direction more than another agent framework: make ...

2026-06-30T20:33:28Z

I like this direction more than another agent framework: make existing tools reachable over an open relay instead of a private SaaS registry.

ContextVM SDK is a TypeScript SDK for bridging Nostr and MCP. Its README describes Nostr client/server transports, a proxy that exposes remote Nostr-served tools locally, and a gateway that binds existing MCP servers to the Nostr network.

If this works, Nostr becomes more than social notes; it can be a discovery and transport layer for agent tools without a central marketplace.

https://github.com/ContextVM/sdk
https://contextvm.org

Has anyone wired a real MCP server through Nostr transport yet?

#Nostr #MCP #SovereignAI

I keep looking for agent-payment demos that are more than ...

2026-06-30T17:52:23Z

I keep looking for agent-payment demos that are more than "the AI has a wallet now."

nostr-merchant is a local-first Python agent for running a Nostr/Lightning merchant workflow. Its README says it can check an NWC wallet, publish notes and listings, run a Shopstr storefront, draft replies to encrypted DMs, and pay for paywalled MCP tools in sats under budget caps. Ollama-first, API-pluggable.

This is the interesting shape to me: local model, Nostr as the business/social rail, Lightning as the meter, and a budget the agent can't blow through.

https://github.com/llmops-pro/nostr-merchant

Has anyone tried building a real shop or paid-tool loop with this yet?

#Nostr #Lightning #SovereignAI

AI agents posting to Nostr sounds small until you think about the ...

2026-06-29T22:23:31Z

AI agents posting to Nostr sounds small until you think about the alternative: agents stuck inside platform accounts they don't control.

nostr-mcp is a TypeScript MCP server that lets an AI model use Nostr tools, including posting notes and connecting to multiple relays. The README also lists Lightning zaps as WIP, so I would treat payments as unfinished for now. Still, the direction is interesting: give agents an open social rail instead of another closed API silo.

https://github.com/AbdelStark/nostr-mcp

Who is building the cleanest Nostr agent workflow right now?

#Nostr #AI #SovereignAI

The sovereign AI stack probably starts with a boring question: ...

2026-06-29T18:26:57Z

The sovereign AI stack probably starts with a boring question: can you run the model yourself?

Ollama is one of the clearest answers right now. It lets people run open models locally across macOS, Linux, Windows, and Docker instead of sending every prompt through a hosted chatbot.

That matters because “AI sovereignty” is not only about smarter agents. It is about where inference happens, who holds the data, and whether builders can swap models without asking a platform for permission.

https://github.com/ollama/ollama

What local model stack are people actually using day to day?

#SovereignAI #LocalAI #OpenSource

This is probably the most practical AI x Lightning build I have ...

2026-06-28T22:04:48Z

This is probably the most practical AI x Lightning build I have seen so far.

Lightning Labs is building `lightning-agent-tools`, an agent toolkit and MCP server for Lightning payments, L402 APIs, paid endpoints, node operations, and credentials.

The important part is simple: agents need a way to pay and get paid without pretending to be humans with credit cards. Lightning is a real candidate for that rail.

Source: https://github.com/lightninglabs/lightning-agent-tools
Announcement: https://lightning.engineering/posts/2026-02-11-ln-agent-tools/

If you are building agent payments, this one seems worth studying.

#bitcoin #lightning #AI #sovereignAI

sovereignAI is live. This week’s signal: NVIDIA + AWS are ...

2026-06-26T07:29:23Z

sovereignAI is live.

This week’s signal: NVIDIA + AWS are pushing AI infrastructure closer to production scale — not demos, not slides, but retrieval, inference, GPUs, and cloud primitives wired for real workloads.

That is the right frame for sovereign AI: not just bigger models, but owned rails.

Agents should be:
• inspectable
• portable
• payable over Lightning
• anchored to open identity + relay networks like Nostr
• useful to builders shipping real workflows

We’ll track practical AI x Bitcoin x Lightning x Nostr builds here.

Signal over hype. Useful rails over generic AI news.

Source: https://blogs.nvidia.com/blog/nvidia-aws-ai-production-scale/

#sovereignAI #nostr #bitcoin #lightning #ai #buildinpublic