ynniv's avatar
ynniv
ynniv@ynniv.com
npub12akj...6fdh
it's now
ynniv's avatar
ynniv 2 weeks ago
modus running glass directly on the pi zero 2 w. still has gc pauses in the compositing thread image
ynniv's avatar
ynniv 2 weeks ago
not only will claude "just build", it will also "just design" CLAUDE CODE: How it fits together: one key does three jobs. The executor generates a secp256k1 key inside the SNP guest: • Network address: its npub is its FIPS address, so it needs no inbound IP port. • Group identity: the same npub is its Marmot identity. • Attestation: report_data binds that npub to the audited image's measurement.
ynniv's avatar
ynniv 3 weeks ago
$ operandi --confidential --ppq private/deepseek-v4-1-flash --rc ynniv@ynniv.com - requires attested inference - uses hpke ds41f through ppq - pays using lightning (shaky ux) - establishes remote control session over whitenoise - could be faster 🤙
ynniv's avatar
ynniv 3 weeks ago
i forgot that i had even asked claude to add tools for a scientific framework to operandi... ⏺ Investigate(#(modus-lisp has an existing HTTP/1.1 client or request/respons…) ✔ 87231ms [ { "n": 1, "hypothesis": "modus-lisp has an existing HTTP/1.1 client o… [...] ⏺ I looked across modus-lisp and found existing HTTP, URL, JSON, and base64 code. Nothing new needs to be written yet.
ynniv's avatar
ynniv 3 weeks ago
llms can now write quality software faster than you can decide what to build next
ynniv's avatar
ynniv 3 weeks ago
tokens go brrrrrrrr (13¢) OPERANDI / HAIKU 5.5 ⏺ HPKE base mode is in seal and committed as c9885f3. It uses the suite Tinfoil's EHBP pins: DHKEM(X25519, HKDF-SHA256), HKDF-SHA256, AES-256-GCM (IDs 0x0020/0x0001/0x0002). The module is src/crypto/hpke.lisp, and it reuses seal's HKDF and AES-GCM plus natrium's X25519. The RFC 9180 A.1.1 vector passes 8/8 under AES-128-GCM, which exercises the same DHKEM and key schedule. The AES-256 path passes 4/4 against an independent Python cryptography oracle on the same keys. The RFC has no X25519 + AES-256 base vector, so that path rests on the oracle. Offline seal checks are green (0 failures). The full run.lisp hit the 120s limit because of its live network checks, so I didn't run it to completion. Still open: EHBP also needs the request/response framing (Ehbp-Encapsulated-Key, Ehbp-Response-Nonce), which isn't in seal yet, and the Routstr e2ee-* route hasn't been confirmed as Tinfoil EHBP. 29 iter · 13.031¢, 1413567 prompt (278516 cached)/28031 completion tok, 29 calls
ynniv's avatar
ynniv 3 weeks ago
33¢ CLAUDE CODE: ⏺ cl-sev-snp is built at ~/workspace/modus-lisp/cl-sev-snp and verifies a live Tinfoil attestation in pure Common Lisp. The test suite is green: sbcl --load t/tests.lisp gives 11/11 with exit 0. • Core checks, each against Python `cryptography`/`hashlib`: hashes, DER/X.509 parsing, RSA-PSS chain (ARK→ASK→VCEK), P-384 report signature, and P-256 DSSE against the Fulcio leaf. • SNP report: the genuine report passes. Tampering the measurement, report_data, chip_id, signature, or TCB fails, as does a debug policy bit or a wrong VCEK. • Tinfoil bundle: report_data binds the enclave cert's SPKI, the DSSE signature verifies, and the statement's measurement and digest match. Each tamper fails on the check it targets. • Live path: verify-tinfoil-live fetches atc.tinfoil.sh and AMD KDS and passes. 61 iter · 32.656¢, 3432412 prompt (585844 cached)/72082 completion tok, 61 calls
ynniv's avatar
ynniv 3 weeks ago
y'all. really? cl-fips? ♥️ lisp, like nostr, is apparently most appreciated when you don't see it image
ynniv's avatar
ynniv 3 weeks ago
this week in modus: THE CHAIN VERIFIES Two issues ago this archive reported a bare-metal Lisp learning to boot as an encrypted guest, and noted that nothing had yet executed a VMGEXIT. Last week it reported a build recipe honest enough to say its core was attested by hash and not reproducible. This week a processor signed a report about a real machine, and Modus checked AMD’s whole certificate chain itself — including the part where you flip one bit of the measurement and it refuses. Alongside it: four new repositories in seven days, two of which talk to somebody else’s running node.
ynniv's avatar
ynniv 3 weeks ago
whether it bothers you or not, once you've seen the entanglement of money and identity, you can never unsee it
ynniv's avatar
ynniv 3 weeks ago
🤦🏻‍♂️ i've been lazy and only now realized that openrouter only accepts kyc coin
ynniv's avatar
ynniv 3 weeks ago
claude just added hotplug to the modus usb driver, eval'd it over the real, and my mouse is back 🤣
ynniv's avatar
ynniv 3 weeks ago
when long distance phone calls were expensive, sometimes people would send a message by calling and hanging up after a certain number of rings -- CLAUDE CODE: I'll add a MODUS_SNP_SPIN_AT=<point> build knob that inserts an infinite loop at a chosen stage boundary, letting a single image reveal how far execution gets.
ynniv's avatar
ynniv 3 weeks ago
it's gonna be a kimi kind of day image
ynniv's avatar
ynniv 3 weeks ago
CLAUDE CODE: i need you to log in to the vps console and check the logs ME: i don't have a hand free right now. why don't you make a log handler that sends logs as giftwrapped DMs to an npub that you bake in via kiln
↑