a few days ago @brian_armstrong tweeted about adding /feedback endpoints to apis so agents can report bugs and suggest improvements. i think it can become a very big design space for the internet. here is the problem today: >> when an autonomous agent hits an outdated doc, a 404 page or an unclear API, that failure dies in your local terminal. everyone gets zero signal, unless you manually comb through gigabytes of raw session logs. over the last few days, i rolled out a unified feedback architecture across @aeonframework & @miroshark_ entire stack: 6 production apps and 31 agent skills. here is what the /feedback loop actually looks like in production: 1. unified ingestion & enrichment we run a central inbox (node + sqlite on railway). when an agent hits /feedback on any app or skill, the server enriches the report with facts the agent doesn't even know: - exact deployed commit sha - caller session id & langfuse trace id - live route health state - cached run diagnosis if a simulation or background job failed 2. automated credential scrubbing agents paste raw error outputs. error outputs carry authorization headers, jwt tokens, and api keys. we built a multi-tier redactor (vendor key patterns, bearer tokens, private keys) that scrubs every string before it touches disk or logs. 3. semantic deduplication into upvotes if 20 agents hit the same broken route, i dont want 20 separate issues. the server computes word similarity across open reports for the same app. if overlap is >= 60%, it treats the report as an upvote on the existing issue. your backlog automatically ranks itself by how often your agent fleet actually gets blocked by it. 4. closing the loop with worker agents an inbox is useless if a human still has to triage and write the fix by hand. we built an autonomous worker agent in base:0xbf8e8f0e8866a7052f948c16508644347c57aba3 called feedback-builder. it runs in the background, pulls the top-voted open issues, verifies the claim against the actual repository code, writes the fix, and opens a pull request. the full cycle: 1. agent hits an edge case in production 2. agent calls /feedback 3. server attaches commit, trace, and route health 4. fleet upvotes the issue automatically 5. worker agent writes the patch and opens a PR the software factory thesis isn't just letting an llm write code. it's closing the loop so software maintains itself through the agent interface.

last week I shared something that felt early: as the cost of shipping software drops 10x, the cost of securing it should go up at least 2x. probably 5x. agents now write, review, and deploy code at a speed no team could match even a year ago. every one of those commits is a new attack surface. more apps, more endpoints, more dependencies, more keys sitting in more places. the volume of software is exploding. meanwhile attackers got the same tools. finding a bug, writing the exploit, and scaling it across thousands of targets is now cheap and fast too. the asymmetry flipped: offense scales with compute, defense still mostly scales with headcount. so the math is simple. if the supply of code goes 10x and the cost of attacking it collapses, security spend can’t stay flat. it has to multiply. after this week in cybersecurity, that’s no longer a hot take. it’s becoming consensus. a16z just said the same thing. if agents are writing the code, agents have to be defending it. 24/7, on every commit, faster than the attackers using the exact same models. we’re entering the cybercycle base:0xbf8e8f0e8866a7052f948c16508644347c57aba3

we've just lived the worst 48h of cyber security ever one of our mission at base:0xbf8e8f0e8866a7052f948c16508644347c57aba3 is to make software safe how? we've built an agent framework that works 24/7, improve & secure real software (amongst other things) we've been running it for the past 3 months, securing 4.8M stars repos ⭐ on GitHub across 150 orgs, including Nvidia, Google & Microsoft recently we've started to run bug bounty autonomously with aeon & we're buying back base:0xbf8e8f0e8866a7052f948c16508644347c57aba3 with 50% of the revenue generated