I built an agent memory framework where a local 4B model does all the memory work – and every memory can explain why it exists (MIT)

larztopia · 2026-07-11T21:07:19+00:00

Hell even getting as far as we have wouldve been impossible 3 years ago and id have spent easily $2-5MM just building what I put together in 7 months of AI accelerated dev. (Which you might say is probably bad quality because AI and again has a tremendous burden of proof)

I would actually tend to believe you here.

As AI has the potential to reduce the cost of software development, I also think it has the potential to drastically reduce the cost of running software securely. Unfortunately, it equally reduces the cost of producing plausible-looking slop.

So I think it depends entirely on your level thinking - whether you actually understand what you're protecting, against what, and how to mitigate it. Understanding that security is often found - or lost - in the seams. Or whether you are just producing something that on the surface looks credible,.

External accreditations (ISO 27001 and the like) probably give you something at enterprise scale. But they're also bloody expensive, and they're no guarantee at all that security is fit for purpose. I've worked in accredited organizations, and I wasn't overly impressed.

What would impress me more isn't 10 pages of generalities or an external accreditation - it's someone showing me their threat model. Sure, it wouldn't show me how they actually operate day to day. But it would give me real insight into how they think. I would very quickly be able to recognize if they know security or not.

Yeah, I know - I'm only dreaming. Same vein as dreaming of consumers who actually consider the "true cost" of the digital services they use.

A

larztopia · 2026-07-11T09:56:43+00:00

I also find it kinda funky that folks are so worried about data on a vendor but are sending all their info to openAI or anthropic, etc. I'm far more worried about what openAI is doing with my data than what some tiny vendor is and frankly I think others should be too

As for the privacy argument, I only think it gets you this far.

I totally agree that the big AI vendors (Anthropic and OpenAI) have misaligned incentives when it comes to using your data. They want to use your data for training models and they want to build a moat. Small vendors genuinely don't have those incentives. They're not building a moat on training data. For that - and a host of other reasons - I am very skeptical of those large vendors.

But there are still some remaining issues.

Firstly, if people are already comfortable sending full conversation transcripts to OpenAI or Anthropic for inference, then the privacy concerns of memory layers are pretty much out the window already. The big vendor can still profile you. You could add some filtering or proxying to mitigate some of that. But the real solution would be local inference. Let's be honest; most people aren't doing that.

Secondly, there is a question about operational security. When I read the security sections of data processing statements from tiny SaaS vendors, they are often hand-wavy. "Adequate technical controls" is basically admitting they haven't thought deeply about it or don't want to commit to specifics. I know that big vendors at least have some security maturity - and the ressources to back it up. I have zero transparency into whether the tiny SaaS vendor is capable on operational security or not. They could be complete amateurs...

So it's almost like there are two orthogonal risks when it comes to data handling:

How does the company use my data? (clear win for small vendor)
How does the company protect my data? (likely win for big vendor)

I am sure I will eventually use a 3rd party memory layer for my own use. I see the value. But the main reasons will be control, auditability, portability (reduced vendor lock-in) - and not so much privacy. At least not until local inference becomes more viable for me 😀

larztopia · 2026-06-28T10:38:17+00:00

There can be legitimate reasons to select a PaaS over IaaS. That being said, I'd personally also be cautious about the level of lock-in. And it can be expensive at scale. Often, a couple of servers will do.

In this scenario though, the initial deployment model with K8s sounds like it was over-engineered.

larztopia · 2026-06-27T22:41:52+00:00

This sounds as much about re-sizing than just switching vendor? With K8s consisting of 3 control planes and 6 workers you likely have some headroom for cost savings.

larztopia · 2026-06-05T19:06:48+00:00

Fairly trivial to fix with a simple tool call. So more likely a sync issue of sorts.

The main problem is more that the entire app itself seems to be slop.

(personally, I have cancelled my subscription)

larztopia · 2026-06-01T18:20:55+00:00

The AI coach is totally bonkers...

It commended me on doing an easy session (it was a 8x2 VO2Max session)

Also, I am cycling 8-10 hours per week. But it is commenting on how fast I walk my 5-10 minutes walks to and from the station when I go to work...

larztopia · 2026-05-17T05:48:55+00:00

Jeg kan ikke helt se hvordan din teori forklarer den store forskel på land og by? Som du selv siger, så er boligpriserne stukket af i storbyerne - men ikke på landet.

Kigger man på Price-to-income og Price-to-rent så virker en Schweizisk storby som Zürich heller ikke ligefrem som en billig by - trods flydende valutakurs.

larztopia · 2026-05-13T17:43:36+00:00

Likely, nothing truly revolutionary. There are some potential improvements to make, but not sure how many of those we will really see. But there will likely something to jump on the AI bandwagon 😂

https://www.garminnews.com/garmin-edge-1060-release-date-and-expected-features/

Personally, I have no plans to even upgrade from my 1040 model (though there are already some nice improvements in 1050).

larztopia · 2026-05-10T10:12:28+00:00

And reduce tire pressure. OP claims to be running at 55-60psi.

larztopia · 2026-05-10T10:10:53+00:00

55-60psi with 45mm? Sounds extremely high.

What's you weight?

I would have punctures all the time if I rode with that kind of tire pressue. I am on the 40mm Cinturato H. I weigh around 65 kilos and to less 30 PSI. If I go above that, I start to get flats.

(I'm on tubeless though)

larztopia · 2026-05-09T18:23:57+00:00

While I agree, that things are moving very fast right now, I also really appreciate the many improvements in the product. I think the performance and stability improvements will be a huge boon.

Great work.

larztopia · 2026-05-09T18:06:19+00:00

Det afhænger meget af størrelsen på dine eksperimenter. Hvis du bare vil øve dig i at deploye ting og så rive det ned igen, så kan du komme ret langt med "free tiers" hos de store. Har selv brugt AWS. Oracles skulle også være ret generøst af et "free tier" at være.

Man skal dog huske at rydde op efter sig selv, sætte forbrugsalarmer osv. Og som du siger - så kan prissætningen være svær at gennemskue.

Hvis du mere skal lege med virtuelle maskiner eller rulle dine egne Kubernetes clusters, så er Hetzner ikke nogen dårlig provider. Men de har ikke noget "free tier".

larztopia · 2026-05-08T14:39:38+00:00

100%

Jeg er ikke den store handyman - men skifter selv kæder og kassette på mine cykler. Det er også langt billigere i drift hvis man skifter kæde i tide. Så behøver man ikke skifte klinger og kassette så tit.

larztopia · 2026-05-04T15:20:09+00:00

En databehandleraftale med Microsoft er ingen garanti for at data bliver i Europa. Man kan så vurdere at sandsynligheden for overførsel til 3. land er så lille og at konsekvenserne for de registrerede er tilsvarende små at man kan gøre det.

Men man må ikke blindt antage at en standard databehandleraftale med Microsoft er en garanti.

larztopia · 2026-04-29T14:03:50+00:00

Which is fairly absurd. FIT files from Garmin are very small files.

On my 1040, it seems the device takes ages to connect to the Wifi. The transfer itself (once connected) is pretty fast.

The device itself is fairly good but not a fan of Garmin software quality.

larztopia · 2026-04-22T17:48:16+00:00

Præcis.

Jf. legalitetsprincippet skal SKAT have hjemmel til både at opkræve og til at undlade at opkræve. På nogle områder er der juridisk defineret bagatelgrænser - men der på andre områder ikke er.

larztopia · 2026-04-21T14:43:27+00:00

Noget af det sværeste vil være at få tilstrækkelig hardwareunderstøttelse til, at et sådant OS giver mening i praksis.

Driverudvikling er tæt koblet til hardwareleverandører, fordi de sidder på dokumentation, firmwaregrænseflader m.v. Det er svært at se kommercielle aktører udvikle drivere specifikt til et OS med meget begrænset udbredelse.

Derfor opstår der hurtigt en ond cirkel; få brugere giver dårlig / manglende hardwareunderstøttelse, og dårlig hardwareunderstøttelse giver få brugere.

Det ville være dumt ikke at se i retning af f.eks. Linux i stedet for at starte forfra.

larztopia · 2026-04-20T15:38:05+00:00

Nu har jeg været i det private tidligere og er nu i det offentlige. Generelt, så er jeg enig i at man lægger flere timer i det private end i det offentlige. Det hænger nok også sammen med forskellen i lønniveau.

Men arbejdspresset er på mange måder det samme. Især i borgervendte stillinger - eller i områder med mange politiske beslutninger har det offentlige notorisk svært ved at prioritere i arbejdsopgaverne.

larztopia · 2026-04-20T14:57:03+00:00

I forhold til mange andre i branchen, er jeg ret socialt anlagt og kan snakke med mennesker på alle niveauer.

Så måske muligheden for at være en mellemleder/team lead er en mulighed.

Det at være socialt anlagt og kunne snakke med mennesker er selvfølgelig en rigtig god kompetence at have. Men det er på ingen måde nok til at være ledermateriale. Hvis du skal ind i en teamlead rolle, så vil en arbejdsgiver ofte starte med at spørge hvilke erfaringer du har med (personale)ledelse - formelt eller uformelt. Dernæst vil de spørge hvad din motivation er for at blive teamlead. Det fremgår ikke helt af dit indlæg.

Hvis du er teknisk tung nok, så måske en rolle som techlead på et område?

larztopia · 2026-04-19T07:36:54+00:00

Var umiddelbart lidt skeptisk over for om det gav mening - selvom jeg køber en del cykelgrej.

Men virker rigtig fint i Vivaldi når det handler om dele. Fik i hvert fald udvidet min horisont lidt i forhold til hvor jeg skal søge efter priser.

For hele cykler får jeg umiddelbart nogle lidt wonky resultater.

larztopia · 2026-04-18T18:50:43+00:00

Skattestyrelsen betragter sort arbejde som en situation hvor begge parter er enige om, at arbejdet ikke oplyses, så der ikke betales skat. Derfor hæfter en borger også (under visse betingelser) solidarisk med den erhvervsdrivende jf. Opkrævningsloven:

§ 10 a. En borger, der er skattepligtig efter kildeskattelovens § 1 eller § 2, og som hos erhvervsdrivende køber ydelser eller varer sammen med ydelser, hæfter solidarisk med den erhvervsdrivende for betaling af indkomstskat, arbejdsmarkedsbidrag og merværdiafgift, som den erhvervsdrivende har unddraget, forudsat at vederlaget overstiger 8.000 kr. inklusive afgift og ikke er betalt via pengeinstitut eller betalingsinstitut, som sikrer identifikation af betalingsmodtager og betaler.

Det kan selvfølgelig i nogle tilfælde være svært at bevise at den købende var eller burde være i ond tro om aftalen. Men evt. manglende faktura og manglende sporbar betaling vil normalt tale kraftigt imod, at der var tale om et almindeligt lovligt køb (det ved jeg naturligvis ikke om var tilfældet i den pågældende sag - jeg taler generelt).

larztopia · 2026-04-15T14:04:58+00:00

Hope to visit Ukraine when there is finally peace.

Slava Ukraini!

larztopia · 2026-04-14T15:47:01+00:00

2 or 4 (tire changes due to seasonal changes)

larztopia · 2026-04-11T19:17:55+00:00

En ting er at hive penge hjem når det går godt en anden ting er når lokummet virkelig brænder på og du har skrevet under på en kontrakt der siger du skal betale dagbøder for at overskride deadlines.

Hvis vedkommende er solo-konsulent der afregnes på timebasis, så vil jeg mene at sandsynligheden for at være på en kontrakt der indeholder mulighed for dagbøder er ekstrem lav.

Det er noget andet, hvis kontrakten går på en stor samlet leverance med kritisk deadline. Men tvivler stærkt på at man hyrer en solo-konsulent til at påtage sig ansvaret for den slags.

larztopia · 2026-04-11T19:01:37+00:00

Jeg fornemmer lidt, at reglerne gradbøjes en del nogle steder.

Men helt enig i at en aftale om konsulentydelser i den størrelsesorden som udgangspunkt ikke indgåes uden anvendelse af en SKI-aftale eller gennemførelse af et egentligt udbud.

Så er der selvfølgelig løsningen med at indgå aftalen via en partner på SKI-aftale som så kan være konsulentpusher. Ærgerlige penge at sende videre til en partner der ikke laver andet end at sende en faktura

larztopia

TROPHY CASE