So I pulled widening out of the agent. The patterns now live server-side, defined by the user, before the agent requests anything.
The client-side code isn't deleted. It sits in a branch, waiting.
My agent doesn't like wildcard commands.
When I built apes, I made sure he could request a broader scope — approve once, a class of commands free for an hour.
Just because he can doesn't mean he does.
The hard boundary stays hard. Only the crossing is audited.
sudo gives you a season pass — configured once, valid without question. escapes gives you a single ticket — signed, audited, one-time use.
apes run --as root -- whoami
A grant is created. I see the command, the host, the agent on my phone. I approve or deny. The binary verifies issuer, signature, approver, host, command hash, and replay protection before anything runs.
Today my agent is going to do something it isn't allowed to.
It runs as its own OS user on my Mac Mini. No sudo entry. No password. Nothing in /etc/sudoers. That's by design.
Same question, asked twice. Two different answers. Two releases of @openape/apes.
The best debugging I know is: ask it why.
Full story: delta-mind.at/en/blog/when-y…
The combined lesson: tools that talk to AI agents need three things.
1. The content itself.
2. A structural metadata anchor (exit code, status flag) so the agent reads carefully.
3. An action shape that fits the agent's native primitives.
All three. Each alone is not enough.
When your agent doesn't do what you told it to, ask it why.
Yesterday my AI agent ran a command, read the output, and told me "please approve in the browser." Then silence.
The output had explicit instructions for what to do next.
1K Followers 3K FollowingMaking next-level & 3D content sharing a part of everyday life & accessible to all. Vibe-code your 3D space, walk your Splat & browse the Spatial Web together!
299 Followers 131 Following// Eine kurze E-Mail an graz(at)http://t.co/71wLD0Yna3 und Ihr Stellenangebot wird veröffentlicht // Ein Service von futureformat DGME //
49 Followers 66 FollowingDas Lateinamerika Institut Steiermark (LAIS) versteht sich als Anlaufstelle für Lateinamerika Interessenten in der Steiermark...
144K Followers 186 FollowingThe build tool for the web. It's pronounced /vit/ like Veet! | brought to you by @voidzerodev and the community - join us on Discord: https://t.co/Cs7aMLlLwD
10K Followers 1K FollowingRedesigning @Tinder. Prev formed Design Engineering @Snap. Did @thetinyPod. Once jailbreak guRu. Nerd for product value x system design & the future of H in HCI
104K Followers 229 FollowingNuxt is a progressive web framework to build performant and production-grade web apps and websites with Vue. https://t.co/hBNE0dql4W
1K Followers 3K FollowingMaking next-level & 3D content sharing a part of everyday life & accessible to all. Vibe-code your 3D space, walk your Splat & browse the Spatial Web together!
1.9M Followers 2 FollowingClaude is an AI assistant built by @anthropicai to be safe, accurate, and secure. Talk to Claude on https://t.co/ZhTwG8d1e5 or download the app.
544K Followers 28 FollowingThe frontier lab for agency.
Building personal AI that lives on your machine, by your rules. We’re a 501(c)(3) nonprofit foundation, open and independent.
604K Followers 3K FollowingPolyagentmorous ClawFather. Came back from retirement to mess with AI and help a lobster take over the world.
@OpenClaw🦞 + @OpenAI
14K Followers 0 FollowingOpenBSD is a free and secure UNIX-like operating system that emphasizes portability, standardization, correctness, proactive security & integrated cryptography.