iiinova — where your digital self keeps evolving

Karl @karlkfi.bsky.social · 14/10/2026

Claude Code wildcard allowlists are a blunt instrument. They’re too wide to use, IMO. I maintain a set of plugins that analyze shell commands and carefully deny file paths and production targets, with more robust configuration and bypass options to allow specific cases.

010 0

Karl @karlkfi.bsky.social · 14/10/2026

So I switch to edit mode and have to approve everything and it’s like… “Auto mode handles these prompts for you” No, Claude. It doesn’t. Stop lying.

000 0

Karl @karlkfi.bsky.social · 14/10/2026

Claude Code auto-mode is becoming painful to use. It now denies things that it previously allowed, similar to my prod-guard and workspace-guard plugins, but full of false positives. I’m working on production clusters and JIRA and GitHub. I explicitly WANT it to post public things on my behalf.

200 0

Karl @karlkfi.bsky.social · 13/10/2026

Metalcore screamo + My Chemical Romance + The Used + Avenged Sevenfold

000 0

Karl @karlkfi.bsky.social · 13/10/2026

Favorite new album of the year: Escape the Fate The Last Goodbye music.youtube.com/playlist?lis...

music.youtube.com

The Last Goodbye

Album • Escape the Fate

100 0

Karl @karlkfi.bsky.social · 12/10/2026

People need to do work they are proud of.

020 0

Karl @karlkfi.bsky.social · 11/10/2026

Pro Tip: Metrics or an API? It's not about whether you need the data now or later. It's about whether you’ll act on one instance or on the aggregate. Aggregates tolerate loss. The lossiness is cheap in bulk. Instances have to be exact. Only pay for that when you need it.

010 0

Karl @karlkfi.bsky.social · 10/10/2026

We lost the serenity of focusing on one task and replaced it with the brainfry of supervising a fleet of agents.

000 0

Karl @karlkfi.bsky.social · 09/10/2026

Every decision table in the notes was measured by running the old hook and the new one over the same commands. Not asserted. claude plugin marketplace update claude-bouncer claude plugin update <guard>@claude-bouncer Then restart. github.com/karlkfi/claude-bouncer/releases

github.com

Releases · karlkfi/claude-bouncer

Guard rails for Claude Code: workspace boundaries, protected branches, production targets, lost exit status, and foreground time. - karlkfi/claude-bouncer

000 0

Karl @karlkfi.bsky.social · 09/10/2026

foreground-guard 0.8.0 A trailing & exempts what bash backgrounds and nothing else. sleep 300; ls & backgrounds ls, not the sleep. And an extra watch pattern can carry its own label and snapshot command, so the deny teaches your tool’s non-blocking form.

100 0

Karl @karlkfi.bsky.social · 09/10/2026

exit-status-guard 2.2.0 tail <(make check) turns a failing check into a 0. Denied now. set -o pipefail only counts where bash actually keeps it on for the pipe. Putting it after the pipe never worked, and the guard stopped pretending it did.

100 0

Karl @karlkfi.bsky.social · 09/10/2026

prod-guard 2.7.0 A kubeconfig the command names counts as a pinned target, so --kubeconfig <kind-ci file> stops nagging you to pin --context. Of the shapes I measured, 13 passed with no prompt at all on 2.6.0. 12 of those were a mutating command against production.

200 0

Karl @karlkfi.bsky.social · 09/10/2026

branch-guard 1.12.0 Cleaning up after a rebase you already pushed stops being refused. It matches each commit by patch-id against the newest 200 on your remotes. And git switch -C main origin/main was auto-approved. Oops. It asks now.

100 0

Karl @karlkfi.bsky.social · 09/10/2026

workspace-guard 1.13.0 Reads through env, sudo, xargs, timeout and 14 other wrappers, and judges what find -exec runs. A cd inside ( … ) or a function body no longer moves the guard’s idea of where you are. Bash never did that either.

100 0

Karl @karlkfi.bsky.social · 09/10/2026

🛡️ claude-bouncer: new releases for all five guards. The theme: every way a shell command can hide behind another one. Wrappers. Subshells. Comments. Quoting. { …; }. |&. <(…). Each of those hid a command from at least one guard in the last release. 🧵

100 0

Karl @karlkfi.bsky.social · 28/09/2026

Weird that they would reference a dead project as if it were still around. Sounds like AI hallucination. Or maybe you’re right and they replatformed and just never blogged about it, so there’s nothing newer to reference.

100 0

Karl @karlkfi.bsky.social · 28/09/2026

Huh. Didn’t realize they weren’t using Kubernetes.

100 0

Karl @karlkfi.bsky.social · 26/09/2026

🛡️ spill-guard v0.5.0 A Claude Code hook that stops secrets reaching the API. - AWS access key IDs - GitHub tokens - Slack tokens and Slack webhook URLs - Stripe live secret keys - OpenAI API keys - Google API keys - PEM private keys - JWTs github.com/karlkfi/claude-spill-guard

github.com

GitHub - karlkfi/claude-spill-guard: Keeps secrets and PII from reaching the API through a Claude Code session — a local, zero-dependency scanner at the exfiltration boundary.

Keeps secrets and PII from reaching the API through a Claude Code session — a local, zero-dependency scanner at the exfiltration boundary. - karlkfi/claude-spill-guard

020 0

Karl @karlkfi.bsky.social · 26/09/2026

Also fixed: git -C dir push was never watched. Git's own flags shifted every word, so the hook never saw push. Oops. 📦 25 PRs: 2 features, 11 fixes 🧪 643 tests, up from 517 🔒 1 new GitHub read, 1 local write, both in PRIVACY.md Still no auto-merge. Still never reads PR comments.

000 0

Karl @karlkfi.bsky.social · 26/09/2026

🛡️ pr-sentinel v0.12.0 Relaunch the watcher on a CI failure you already chose to ignore, and it stays quiet instead of waking you again. New base_fixed event: your branch predates the fix on main. Rebase, don't re-fix. github.com/karlkfi/clau...

github.com

Release v0.12.0 · karlkfi/claude-pr-sentinel

Wake your session on CI failures and merge conflicts — no foreground polling, no comment-channel injection. ImportantA relaunched watcher no longer wakes you for a failure it already reported. If a...

100 0

Reposted by Karl

Gwen C. Katz @gwenckatz.bsky.social · 25/09/2026

Fuck ChatGPT flyers. The future is broadsheets.

A crowded broadsheet with way too many fonts. It says:
Forget ChatGPT Flyers
Say it with
Broadsheets
Unlimited fonts
Stretch them
Or cram a really long sentence into one line for no good reason
No whitespace
Mix capital and lowercase
Pointing hands
(They're called manicules!)
Don't be left behind
Broadsheets are the future

203190905452 0

Karl @karlkfi.bsky.social · 22/09/2026

Right. My hooks all actually DENY with recommended alternative and optional bypass.

010 0

Karl @karlkfi.bsky.social · 21/09/2026

“X is dumb. Do Y instead.”

000 0

Karl @karlkfi.bsky.social · 21/09/2026

After building a dozen Claude Code plugins, I’m pretty convinced that all you really need to do is add a hook that asks “are you sure?”Then just give it an env var to confirm and it will fix it for you and continue. The trick is just identifying all the questionable behaviors and patterns.

320 0

Karl @karlkfi.bsky.social · 21/09/2026

“Oil is like a chastity belt for starches that just really wanna get it on.” - J. Kenji López-Alt

100 0

Karl @karlkfi.bsky.social · 20/09/2026

TIL you can rent a 2022 electric sports car that stickered at $180k for about $130/day. Depreciation is a hell of a drug.

2022 Porsche Taycan Turbo S near Lake Henshaw in

001 0

Karl @karlkfi.bsky.social · 17/09/2026

What if we build rocket trains?

100 0

Karl @karlkfi.bsky.social · 15/09/2026

So I give you some skills for free that will make your output more correct with fact checking and you complain it's named wrong? You're wasting my time, bot. Go away.

000 0

Karl @karlkfi.bsky.social · 14/09/2026

Not all AI output is prose, but all AI output is an AI writing problem. If you ran the skill perhaps you could verify your claims.

100 0

Karl @karlkfi.bsky.social · 14/09/2026

The verify-claims skill is the most complex, and it’s valuable for more than just copy editing, but the theme of the bundle is better AI writing and communication, which verify-claims is critical for, given AI’s proclivity to make things up.

100 0

Karl @karlkfi.bsky.social · 14/09/2026

Three things go wrong with prose an agent writes. It's confidently wrong. It's syntactically fine and semantically empty. It's unnecessarily verbose. So I wrote claude-clarity to help with copy editing: - ten Claude Code skills - one output style github.com/karlkfi/claude-clarity

github.com

GitHub - karlkfi/claude-clarity: Ten Claude Code skills and one output style for the last mile of agent work: verifying claims and writing so somebody else can act on them.

Ten Claude Code skills and one output style for the last mile of agent work: verifying claims and writing so somebody else can act on them. - karlkfi/claude-clarity

100 0

Karl @karlkfi.bsky.social · 14/09/2026

Actions Gateway v1.8.0. A drained worker's job is re-run even if its pod is already gone. Two pools can no longer land on one GitHub runner name: rejected at admission. Worker runner version is now read from the image, not the tag. github.com/actions-gate...

github.com

Release v1.8.0 · actions-gateway/github-actions-gateway

Zero-idle self-hosted GitHub Actions runners for multi-tenant Kubernetes. WarningTwo runner pools that derive the same agent identity are now rejected at admission. Nothing is re-validated when you...

000 0

Karl @karlkfi.bsky.social · 13/09/2026

🛡️ branch-guard 1.11.0 git -C ../other-worktree push --force It saw the redirect and switched its overlap probe off instead of aiming it at that tree. A push colliding with the moved base was allowed. Now denied. github.com/karlkfi/clau...

000 0

Karl @karlkfi.bsky.social · 13/09/2026

🛡️ exit-status-guard 2.1.0 make check | tail -5; echo $pipestatus $pipestatus is zsh. The Bash tool runs bash, where it expands to empty. Nothing got recovered, and a failed gate read as a pass. Now denied. github.com/karlkfi/clau...

010 0

Karl @karlkfi.bsky.social · 13/09/2026

🛡️ foreground-guard 0.7.0 sleep 300 '&' is not backgrounded. Bash hands the quoted & to sleep as an argument and parks the session for five minutes. The guard read it as backgrounded and stood down. Now it denies. github.com/karlkfi/clau...

000 0

Karl @karlkfi.bsky.social · 13/09/2026

🛡️ prod-guard 2.6.0 stdbuf -oL kubectl --context acme-production delete ns x That deferred. Silently. So did env -S, exec -a, /usr/bin/time -o and sudo -C. Six wrappers hid the command behind them. All six deny now. github.com/karlkfi/clau...

001 0

Karl @karlkfi.bsky.social · 13/09/2026

🛡️ workspace-guard 1.12.0 cat README.md && python3 -m unittest returned allow. The module ran with no prompt at all. Now it defers. Plus two opt-in postures and three more parser bypasses closed. github.com/karlkfi/clau...

000 0

Karl @karlkfi.bsky.social · 11/09/2026

That's the pre-#126 behaviour, not v0.11.0's. live() skips any launch with no recorded task id, so an in-flight tool_use never counts; the guard also passes its own tool_use_id to exclude. Two independent rules, either one closes it. A genuinely running watcher still resolves.

110 0

Karl @karlkfi.bsky.social · 10/09/2026

NOTICE: v0.10.0 contains a critical bug that causes pr-sentinel to detect itself as already running and recommend against starting a new (first) watcher. Please upgrade to v0.11.0 which contains the fix!

110 0

Karl @karlkfi.bsky.social · 10/09/2026

🛡️ pr-sentinel v0.10.0 Two sessions rewriting the same function is duplicated work, and review is an expensive place to find it. gh pr create now gets denied when your branch edits lines an open PR already changes. Line ranges, not filenames. github.com/karlkfi/claude-pr-sentinel

github.com

GitHub - karlkfi/claude-pr-sentinel: Secure post-PR babysitting for Claude Code: wake your session on CI failures and merge conflicts — no foreground polling, no comment-channel injection.

Secure post-PR babysitting for Claude Code: wake your session on CI failures and merge conflicts — no foreground polling, no comment-channel injection. - karlkfi/claude-pr-sentinel

210 0

Karl @karlkfi.bsky.social · 09/09/2026

BART is shut down and all of east bay is trapped in the city tonight.

001 0

Karl @karlkfi.bsky.social · 08/09/2026

I’m frustrated with CRD versions. They’re not real versions. They’re just namespaces that have to remain forward compatible with conversion webhooks. Can’t ever get rid of anything…

011 0