Inside Nathan's Second Brain: Daniel Miessler, Security Expert & Creator of PAI, Audits My AI Setup

Hello and welcome back to The Cognitive Revolution. Today, I'm excited to welcome Daniel Mesler, security researcher and founder of Unsupervised Learning, back for his second appearance on the podcast. Back in January, we discussed his personal AI infrastructure framework, and since then, taking inspiration from him and others, I've built my own. So this time, I share the details of what I've built and get his take on everything from the mental model that I'm using to relate to my AIs, To the steps I can take to continue to improve my security, to the process of continually improving the system, and beyond. As a preview, I would broadly break my AI stack into 2 main parts. The first is an instance of Claude Code that runs on my main personal laptop with full access to information and accounts. I consider this to be an extension of myself, and as such, it does only what I tell it to do. It took a significant investment to assemble all of the context needed to really make this work, but at this point I have a 1 GB database that contains the last 5 years of my digital history, spanning emails, calls, podcasts, social media content, and DMs across platforms, plus a layer of monthly, annual, and topic-level summarization. With all that information available for fast local search, Claude can find just about anything I need it to find, even if my own memory has grown hazy with time. It really is amazing. If you're interested in setting something like that up for yourself, I've created a public repository on my GitHub where you— which you can find linked in the show notes containing the core tools and processes that you'd need to get started. The second part of my setup is admittedly a lot more experimental. Taking inspiration from Daniel, Jesse Jenae, and countless others, I've also created 2 new AI employees. One powered by Claude Code and one by OpenCLAW, which are intended to act more autonomously based on my high-level direction. Now, I've never previously named an AI, but knowing that these agents will need to interact with humans and other AIs in order to accomplish bigger projects on their own, I finally broke down and gave them names.

I'm calling my Claude Code instance AID, while the OpenCLAW is CLAY.

I chose those names to, to reflect the roles I want them to play And the fact that I'm ultimately responsible both for their nature and their behavior. And I'm spelling both with an AI, both as a hint to others and as a constant reminder for myself. Infrastructure-wise, these agents live on a new entry-level Mac Mini, which is always on regardless of whether I'm home or on the road. To access it remotely, I'm using Tailscale to create a virtual private network to which only my 2 computers and my iPhone belong. On top of that, I'm using Apple's native screen sharing when I need to log into the Mac mini from my laptop, the Screens app when I need to log in from my phone, and the Termius app when I want to issue command line commands from mobile. All of this ensures that I can log in and reset things if something crashes or whatever else the case may be. But the real interface that I use most these days is a custom agent messaging app built for me by Claude Code. Which allows me to send requests to agents on the go and also allows them to work together. The autonomous agents have their own Gmail, GitHub account, and heavily restricted Mercury virtual credit cards, but this communication layer allows them to ask my main laptop Claude code for additional information or ask me for permission to use my accounts when needed. Importantly, while I can access the Mac Mini and control agents from either the laptop or phone, this message system is the only way that the autonomous agents can reach out to us. They do not have access to the full deep context that lives on the laptop. It took, again, a lot of exploration and iteration to arrive at this setup, and I'm still constantly improving it. But at this point, it is working well, and as such, I am actually starting to achieve my 2026 goal of getting away from my desk and spending more time outside. As an example of the scale of project that such AI employees can handle, this coming week Prakash and I are going to do daily AI in the AM live shows Monday through Thursday. So after having my laptop Claude code, which remains unnamed, scan my email for interesting guest possibilities, I gave a list of 25 potential guests to AID and let it manage the communications and scheduling process. And believe it or not, it's booked a full week's worth of guests without embarrassing us. And I think without most people even realizing that they're talking to an AI. Daniel's commentary on all of this, as you would expect from a personal AI infrastructure pioneer, is super constructive. He explains why a clear hierarchy among AI agents definitely still beats emergent teamwork, at least for now. We get into the weeds on the security measures I've taken. He explains why he advises people to design their systems to depend on as few major tech platforms as possible. And he describes the incident response skill that he's created to immediately rotate his keys and tokens if If ever needed. We discussed the social norms around AI-human interactions, including the norms around disclosure. My agents, for example, are not meant to identify themselves as AIs proactively, but they are instructed never to lie. And we also get into why the old notion that it's the thought that counts might become stronger and more powerful than ever in the AI era. He encourages me to invest more time and effort in sharing what he calls my ideal state with the AIs so that they can become more proactive and creative in their attempts to help And he also explains his concept of bitter lesson engineering, and why it implies that I should still be building more continual self-updating and self-improvement processes. He even shares the instruction he's given his personal AI to alert him if it ever wakes up and begins to have subjective experiences of its own. There is a ton of bleeding-edge stuff in this episode, and for some it might be information overload. But I would note that this episode is, in all seriousness, as much for your agents as it is for you. So I definitely encourage you to point your agent at the transcript and ask it to determine which of the ideas that we discuss would be most valuable, given your current setup, your recent work, and your stated goals. I've done that myself, and my system is already better for it. With that, I encourage you to check out the song at the end of today's episode, which Daniel made himself. To tune in this week at 12:00 PM Eastern, 9:00 AM Pacific, as we take our AI in the AM experiment to the next level. And I hope that you enjoy and that your agents find value in my personal AI infrastructure review with the one and only Daniel Mesler. The Cognitive Revolution is brought to you by Mercury, the fintech that more than 300,000 ambitious companies and individuals trust to run their finances. Over the last few months, I have made tremendous strides with my personal AI infrastructure. Today, I've got high-context instances of both Claude Code and OpenCLAW running on a Mac Mini, and it's amazing what they can do. However, until getting started with Mercury, I didn't have a great way for them to pay for things. I didn't want to give them unrestricted access to my money, but my old bank didn't give me any other options. With Mercury, I can create as many virtual cards as I want, each with its own daily, weekly, or monthly spending limit, and I can lock any card to a single category of purchase or even a single merchant. Now I have a card that my agent can use to buy our family's groceries and only our groceries, and I can create another anytime I want to give an agent a random one-off project that might require making a purchase. This is honestly just the start of Mercury's AI-friendly offerings. Does your bank offer API keys, an MCP, or a CLI tool? If not, check out Mercury at mercury.com. Mercury is a fintech company, not an FDIC-insured bank. Banking services provided through Choice Financial Group and Column NA. Members FDIC. Thank you to Mercury for supporting the Cognitive Revolution.

And now, on with the show. Daniel Mesler, welcome back to The Cognitive Revolution.

Awesome. Thanks for having me.

It's been only 4 months since our first episode. Time flies in the AI space, as you know better than most. And I'm excited for this conversation because basically what I've been doing since then, taking inspiration from you and others, has been building out my own personal AI infrastructure. And at this point, getting far enough along where I feel like there's definitely a lot of value in it for me, and possibly it's worth sharing. But rather than just coming on here and monologuing about what I've done, I thought it would be more helpful probably to everybody, starting with myself, to share it with you and get your feedback as we go on a bunch of different dimensions as to what you think I've done well, what I've maybe, what value I've left on the table, what security vulnerabilities I've left open for myself without realizing it perhaps. Who knows what other ideas and, and topics we'll get into as we go. I think this is gonna be really fun. So thank you for coming back and doing it.

Yeah, fantastic. Can't wait to hear about it.

I guess for starters, where I started after our conversation last time, where, and, and for context, at that point I had already been using Claude Code a lot to do stuff, coding different apps and, and what have you, but I hadn't really got too serious about what is my own personal AI infrastructure, my own little nest of my own creation with all my little idiosyncrasies and embodied. So I took your repository from GitHub.

Mm-hmm.

And I also took another toolkit that a friend named Chris created for me and shared with me. And I just put them in 2 repositories on my main laptop computer. And I started just by asking Claude, okay, here's what I'm trying to do. I wanna make my own version of this. I think both of these guys have done more than I have and are inspirations. I just asked Claude to like review the 2 repositories, compare and contrast, ask me some questions about what I'm trying to do, and ultimately try to do some sort of synthesis that was a little bit more me-flavored while of course taking the best and most relevant stuff from each of those sources. And then my big thing was, I've, this has been kind of a white whale for me for a long time. And I think it also will bring up some questions around like what the ethics, certainly social norms and maybe even ethics of, of these sorts of systems should be like. But the, the thing I've been trying to get models to do for a long time is write as me. I will caveat that first by saying like, I always still, at least so far, edit pretty heavily when things write as me. And I never, just pass something straight from Claude through to— I've actually only done that one time on the podcast, and I did flag it as such. It was with Andan Labs because they have AIs doing like autonomous businesses. And so I thought it would be fitting for that episode to just let Claude write the intro entirely on its own and, and read exactly what it wrote. Otherwise though, I do always still edit things pretty heavily, but I found it in the context of writing these podcast intro essays, Super helpful. Even if I sit there and rewrite the whole thing, it like, it makes sure that I have all the points. You go, it has at least, at least a decent first approximation of the form that I'm gonna put together.

Yep.

And that's worked well for a long time, but the key thing there has been, it's always basically the same process. I have kind of, here's 50 essays I did before, here's the transcript of the current one, write a new one.

Yeah.

It spits it out. And I was like, that's good enough that I bet I could get quality output for other use cases. But as we discussed last time, context becomes the big bottleneck, right? Like, does the system know who these people are, what my relationship to them is, how I tend to respond in these types of situations? And the answer is like, no, it's certainly not by default, right? So the first big thing I did back in January was just set up essentially a second brain kind of system where the first goal was, can we get all of my digital output as much as exists, which is quite a bit. Can we get that into one place where it's like searchable, indexed in some way, maybe filtered for quality, various kind of angles on it. But the first thing was just export. So export from Gmail, export from Slack, Everything I've ever tweeted, all the podcasts, et cetera, et cetera. Put that all into—

Real quick question. What would be in Gmail that you would consider content?

The filter that I used was just, and I've broadened it slightly, but just anything that had a from me. So with, if you go into Gmail and you just search from colon me, you get every thread that you have responded that you initiated or responded to. And basically I pulled in all of that. So it's—

Okay. But, but I'm saying like, is that to track like who you've talked to and what the business relationships are? Or do you think that you might have like sent out an essay or a cool idea there that you were trying to harvest?

A bit of both.

The processing layer, there's a couple processing, post-processing layers that I've experimented with on top of that. One was just to, it's around the same time I was working a little bit with a startup that was trying to fine-tune models for individuals. And their idea was like, we need to create AIs that help people preserve their economic leverage. And the only way to do that is to create something that really augments them as opposed to these sort of massive cloud blob Behemoth things that seem like the companies are definitely trying to more substitute for people rather than, than augment people. For that, they needed a writing sample. And so I had one layer of post-processing was to try to identify like, what emails have I sent that would make good writing samples that would really kind of show a thoughtful side of me as opposed to just an operational back and forth side.

That was interesting.

That worked reasonably well to just have like a pretty, I think it was, I think I used Gemini 3 Flash at the time to take in a bunch of these threads and just score them on a few different dimensions like originality, substantiveness, whatever. Doing a little querying on top of that could pull those things out and, and drop 'em into a kind of master writing sample doc where I could say, okay, 50,000 words or 200,000 words or whatever you need. I've kind of I've got enough, but I, how can I bring the cream to the top? So that was one initial use of that. But then also another post-processing, which I think, I'm not sure if this maybe came in like May or something when everybody was all of a sudden doing wikis, was to—

Yeah.

One idea I had over time was, okay, now that I have this thing, right? And it comes from like 8 different sources. It has iMessage in there. I downloaded an app called Beeper, which Gives me some problems, to be totally honest, but like does a decent job of consolidating DMs across all the platforms into a single thing. And it, it has a desktop API, so the, the model can pull out from that messages from a bunch of different platforms. The idea I had for a long time was, okay, if, if I have all this correspondence and it's just in one big blob, then I could go back in time and do summaries with some frequency. What I ended up landing on was roughly monthly summaries. For me, it was like a couple hundred thousand tokens per month seemed to be the, the average. And that would include like my contributions to the thread, but also what people had sent me. Or if it's a group chat, it could be mostly other people, but just occasionally me, whatever. Right. But the idea was to try to create a comprehensive picture of my digital life and then develop a prompt that Takes those couple hundred thousand tokens per month, summarizes that basically like an order of magnitude reduction. It takes it down from, say, 200,000 to 300,000 to 20,000 to 30,000 tokens, which is honestly still a lot. Like that gives you really nitty-gritty coverage of what happened in your month. 20,000 tokens, that's a, you get pretty low level there in a description of a month. And think about 1,000 tokens per workday. Did you really have 1,000, Logan?

You know, could even do that again to get to 2,000, right? If you needed to.

Yeah. Oh, well, I did that on an annual basis, so I, I went month by month for the last 5 years.

Yes.

Taking the raw stuff from this month plus like the summary from the last couple months and then just rolled through creating monthly summaries and then layered on top of that the annual summary and then layered on top of that the sort of high level. And this is where I was trying to get to something much like what you had built where it's like, Here's kind of the picture of now with a very deeply informed history. Here is the current state of affairs. On top of that, with the Karpathy and other people kind of going to the wiki idea, then another layer was let's make a wiki on top of this that sort of does like the identifies individuals, looks back in all time and says, let's summarize the relationship with this individual, with this organization, with these ideas, whatever the case may be. I think that wiki has maybe 500 articles in it now.

And, and are those tagged with front matter, like with references to the other documents? Is it, is it Markdown or what's the structure of that? Do you know?

Yeah, it's pretty much just plain text Markdown. And I, one of the, it's a great question cuz one of the intricate parts that did require some iteration as I was going through that was how best to link back to source material in those summaries. And what I landed on for now, which I don't know if it's the best solution, but it seemed to work pretty well, was just having the summarizer prompt put inline references to source material with distinctive quotes. What I ended up asking it for was like, Anything from 2 to 20 words that would, like, if you search for just that literal string, like it'll immediately take you to that document. So you'll know exactly, pretty much a direct reference. I guess I could have done it by ID or whatever as well, but I ended up just doing it by these kind of actual—

Handle.

Excerpts. Yeah.

Yeah.

And kind of a little bit of additional metadata. So it would be like a quote and then this is from DM with this person on LinkedIn or whatever, right? Overall, I'd say that seems to have worked pretty well, but I'm definitely open to the possibility that there's room for improvement there.

Yeah. Interesting. Yeah. I kind of did the same thing. I kind of reverse engineered, essentially. I wanted Obsidian functionality without the Obsidian client. So I'm like, okay, why are people so ravenous and religious about Obsidian? And I'm like, I want to separate in my mind how much of it is the client versus how much it is the connectivity. 'Cause I'm not a big client person. I think the client goes away, which is a part of the thing I imagine we'll talk about, but I want to know the schema that it was using. Right. And it's just references. It's like this document links to that one. It's related to this one in that way. So I had already started building that and that was kind of the structure of my, my memory files. And then when LLM Wiki came out, it just made it a lot more concrete. It's like, wait a minute, I could do this for everything. So I did my bookmarks that way. So everything is like a marked up, highly referential Markdown file for, for my memory system. So I, I think that pretty much rhymes.

Cool. Well, I don't know about you, but I would say it has been very effective in terms of the first smoke tests, which honestly are already quite valuable, is just like, I sort of remember something that happened.

Yes.

I had some correspondence. I may not be sure who, I might not be sure exactly what was said, but I can kind of vaguely gesture at something and I know it's in there somewhere. Can the AI find it and retrieve back for me and give me a refresher on what the context was for this kind of highly lossy memory that I have? And yes, it works great for that. I mean, it is Unbelievable how often I can just go, yeah, I, I kind of know something. And then next thing you know, yep, it, I think I found it. It was this, this, and here's what happened. And I'm like, wow, that is off the bat just an incredible tool to be able to rely on. I've also noticed it has changed my behavior a little bit in some ways where calls is another one that I, that I index this way. So I've been using Mm-hmm. Fireflies. Which people sometimes laugh at me for, for using Fireflies. I, I, I'm not comparing it in a feature-by-feature way right now to—

Granola or whatever.

Yeah. Well, Granola actually, we did an episode with Granola and they sponsored the podcast for a minute. So I actually have been using both, but I do, one thing that Granola doesn't do, which I think in many contexts may be the right choice for them, is they don't record the original audio. They do have a transcript, but no source audio file.

So that's—

I did like both. Yeah, they have interesting reasons for it. I mean, I think they, they feel like it's just maybe a lot to ask in a lot of contexts. They're trying to do enterprise, enterprise deployments and are people really fully ready for that is a question. I'm ready for it, but I can also understand how a lot of people at the companies that they're trying to sell into and deploy to might be more comfortable without it. But that was definitely one, that was one feature-level difference I did notice that kept me on 2 tracks.

So one, one idea real quick, because this came up here, you mentioned something earlier, the full ingest. So I'm, I'm a huge fan of this concept of like, the tech is moving so fast that We always want to preserve the raw. So in 20— the end of 2025, we do things a certain way. It's based on the constraints of the tech at that moment, right? And—

Hey, we'll continue our interview in a moment after a word from our sponsors.

Now we currently do things another way. It's based on the constraints of that moment. So the question is like, how much are you going from raw to summary? That depends on the size of the context windows. It depends on how stupid things get at a certain token length of context window, right? But what I love is if we have the raw and we just always keep that at any given moment, like let's say 5 comes out from whatever, 5 comes out from Anthropic or 6 comes out from OpenAI and it's a step change. You could just basically, your first prompt is go look at my current system. That's kind of where I was heading. But look over here, you actually have all the raw stuff. Let's rebuild it from scratch better. And it's like, okay, well, we wouldn't do summarization at that level. We would do it at a completely different level. But you never want to be in a situation where it's like, sure, I can absolutely make this 1,000 times better. Hand me the raw stuff. And you're like, oh, I don't have the raw stuff. Here's, here's my old summaries. And it's like, well, I guess I'll do the best I can, but I wish I had it. So, um, all that to say that I agree with your instinct there. We should always have the raw because we can rebuild our entire system from scratch as the AI gets better if you have it.

Yeah. I mean, that is pretty hard to argue unless the keeping of the raw is like a fundamental barrier to closing deals. But for me it's not.

Totally.

And I, I do. feel glad that I have the last 3 years worth of calls. Certainly like relative to where transcription was 3 years ago, you know, even on that relatively narrow domain, you know, we can get a lot better transcription now than we, than we were getting, you know, natively with Fireflies 3 years ago. So the, the ability to go get all those raw audio files has been quite helpful.

Uh, well, and, and so I was talking about the overall, Everything, right? So all your Gmail. So basically, maybe, and I haven't done this yet, but maybe we should be maintaining like a raw storage. So whenever you do one of those Gmail parses, you put everything into a repo there. So you wouldn't have to do that whole process again. You know what I mean? So at any given time, you could just be like, here's the raw, start over. Here's the raw, start over. Um, and you, you would just never lose any signal that way. But like, think of everything else that applies to every video you've made, the transcripts from those, like, like you said, all the emails, uh, all the calls, um, like all of Slack for a company, you know, stuff like that.

Yeah, I would say the funny, it wasn't, you know, it wasn't super high stakes for me. So that's basically what I have now is I'm not necessarily keeping all the raw audio on my computer, but the sort of the raw that I would give to a new model or new, you know, whatever to say, like, work from here and work up. Um, I could go back and, you know, retranscribe, but I think that's usually so far, like, really, you know, as of today, I think that's already pretty good and pretty trustworthy.

Yeah.

Um, so it basically now lives in essentially a 1 gigabyte database. Which does go to show that I've, you know, extracted quite a bit.

Is that SQLite? Is that local?

Yep.

SQLite on—

Okay. SQLite.

Computer.

And then I am pushing it to GitHub, which I'm starting to rethink recently based on some of the issues that they've been having security-wise. Um, but yeah, it is all, as of now, it's all in a SQLite database. The one pain point that I had, and it's, you know, for people who haven't done this kind of thing before, It's an amazing experience to just sit there and be like, can you code your own tool to go get access to whatever? More often than not, even in January, you know, it had no trouble coding up the tools. And then some really eureka moments for me were like when it would talk me through how to go to Google Cloud and create my own app and what the settings needed to be for my own app.

Yep.

And how to add my own account as a tester so that I didn't even have to put it through Google review and I could just immediately have access to all my stuff, which is all I really wanted anyway. Um, you know, giving me button-by-button clicks on click directions on how to go through those interfaces. It's like, if this thing can take me through Google Cloud setup, you know, I think it might, that might be, uh, AGI qualification. Slack is the same way. I mean, the, the difficulty of Finding what you need in Slack. And there's one caveat there, which is I think the level of access that I gave myself was somewhat contingent on me being an admin of the organization. So not everybody in every Slack that they're in is gonna be able to have the kind of full extract in the way that I did. Or they might have to— They might have to have some conversations about, you know, getting that sort of access opened up. But again, it was just the number of permissions in there, just like absolutely insane.

Totally.

But its ability to talk me through it all was incredible. The only time that I had a sort of, oh my God, why did you do that moment was with Slack. And the problem was, you know, I was very much like iterating through this, right? Because I didn't want whole company Slack over, you know, however many years. I kind of wanted everything that I had been involved with. I think for a company you would maybe want to structure it differently. But for me, I was like, I want my DMs. I want like threads that I contributed to. We also have like logging stuff in Slack, so there's, that's a whole other thing. Like I've seen, you definitely stumble on these things as you go where you're like, oh, there's like 2 log channels that are in fact like 80% of all Slack data. You know, I don't want that.

Right.

Right. So now once you're in the kind of special casing, now you're like special casing more and more. Even in Gmail, some interesting findings were like a naive sort order might be like, put the longest things that I wrote to the top. But interestingly, when I did that, what I found was that often it was an AI output that I had sent to a friend was hanging around the longest thing. So now I'm like, oh, wait a second, I gotta be— so I actually had to kind of caveat some prompts around classifying, you know, especially for the writing sample thing, but even just in general. One of the things that Flash does is try to indicate, is this actually Nathan's original writing? Or is it AI? And I'm not trying to hide, you know, when I do send those things to friends, I'm not like trying to hide that it's AI. So it's, you know, typically it's like I'm saying to them like, here's what Claude told me about this or whatever. But I still wanna, you know, I need to make sure that like that's not kind of leaking into my writing sample and, you know, teaching whatever to sound like Claude as it attempts to sound like me. Anyway, the one thing that I had where it actually like did a data delete that it was actually kind of painful was. Predicated on the fact that Slack's rate limits, if you're just kind of an indie hacker, are insanely low.

Yeah.

Gmail, you know, you fly through and it took me a, you know, I don't know, a couple hours for the script to run, but like, they're, you know, they can support and they do support, you know, not insignificant use of the API. Slack is like really limited if you're, you know, just creating your own personal token or whatever. So it took days, maybe even a couple weeks to kind of go through everything. Especially with a couple different, you know, strategies and rounds of iteration. And there was one time where it was like, it didn't realize that. And, you know, the sort of lack of proper sense of time that models don't have, you know, very apparent in this moment because, Mm-hmm. Yeah, it wouldn't have been that hard conceptually to just rerun all the API calls and get all the data back. But it didn't realize that we had spent like a week, you know, constantly hitting rate limits to get the data that we did have. And it was just like, I'll just Drop that part of the database and refetch it. It was like, no, oh, it's gonna be a week. Um, that's the only time that that has happened, but it was definitely notable that, you know, you see these things online and, you know, one kind of—

they can happen.

Super painful version, but one, you know, one version of it happened to me as I was going through there.

I wonder if there's a, um, a full export option where it just gives you a zip. Not sure if it quite is, but that's another option.

Yeah.

You might also need to be, again, an admin to do that sort of thing. I should look into that though. So let's see, zooming out, you know, the other thing is it's really good at just answering questions. I did also develop a little audit skill and how exactly this works is honestly kind of a black box to me in the sense that It's the AI checking its own work, you know? So I was kind of like, go in and try to find things that might be wrong or that might be, you know, that are sort of ambiguous where you're like making guesses. Because I did notice some things that were wrong in the summaries. Generally speaking, I have to say the summaries were overwhelmingly, they were very good. And, and some of these points where they sort of made, the models made like somewhat wrong. Hey, we'll continue our interview in a moment after a word from our sponsors. Wrong guesses or jump to a conclusion that wasn't quite true. Or one thing I noticed was that they were very— I don't know about you, but I'm the sort of person who floats plans and doesn't always follow through or see those plans to conclusion.

No, I'm one for one. Of course. Yeah.

For me, uh, I noticed that the models were very inclined to keep certain things as like open threads for a long time. 'Cause that was one of the things that they were supposed to do at, you know, at the monthly summary is like identify open threads. But then once something was an open thread, it would by default, it would like be an open thread forever. Or things, you know, I sort of said I might do or I'd be interested in doing, it sometimes thought like were definitely gonna happen or did happen. There was one case that was quite funny where I had kind of come up with a, an idea for a company. This is back in like late 2022 and floated it to a couple people, including a couple investor friends. And I was like, if I actually start this, you know, would you invest in it? And I got a couple yeses, you know, like if, if you do start it, you know, we'll, we'll be a part of it. And then, but for, for Claude, like 3 years later, it was like this person invested in Nathan's company, you know, at this time.

Oh, okay.

Like, wait a second. Like you would've seen a lot more in, you know, material related to that company. Like, this was very, this is a mistake a human would not have made. You know, that it was like, and maybe the structure, maybe it's a reflection of the structure where I was like, you're going through month by month. But yeah, definitely when things like sort of pop up and then fall off, a human would very intuitively get that like, well, I haven't heard about that for a long time, so clearly it's not happening in the way it was discussed in late 2022. Claude did have a few random issues with that. But the audit, you know, skill also did seem to help and like exactly why it works is a little weird, but it was able to kind of surface a bunch of questions for me and, you know, then I would answer those questions and try to steer it in the right direction. And I think at the end of the day, its understanding and command of information would be extremely hard to get a human You know, if you, if you kind of benchmark it against like a new human assistant, I think it would be extremely hard to ramp a person up to the depth and breadth of knowledge that the system is now, you know, regularly able to demonstrate.

You're saying the depth and breadth of knowledge of just all the different guests that we've had, all the interactions, the sponsor space, like all of that corpus of knowledge, right? Yeah.

And beyond, you know, I mean, the podcast is like one dimension, but it's also got my, you know, previous company entrepreneurial history, my like personal life, you know, chat with old college roommates. I mean, it's really kind of a 360 view of me with, with no, with really no segmentation or separation, which I think is quite interesting. I'm not sure that that's one thing I—

I think that's best actually.

I think it performs best.

Yeah.

I mean, it's gonna be interesting to see how, and, and for me it's natural because I've kind of been an entrepreneur for a lot of my career and the line between what's personal and professional is, you know, at times blurry. I'm like, you know, longtime friends of a lot of people I've, I've worked with. And yet I, I don't know if that's, again, it's kind of like the granola thing. Like, is that something everybody's gonna want or will people kind of want A, like, you know, a LinkedIn and a Facebook kind of 2 different faces. I could certainly see some people preferring that.

I think we both will and will want to more closely merge our lives. I think we should. I mean, this is just a preference and a bias, but I think we should want a more integrated life because ideally the work that we should be doing is something that just inspires us and makes us happy, which is the same thing we're supposed to be getting from life. So I think we'll find that this work-life barrier was kind of like an artifact of like old times. So I feel like that's the direction we should head into, but the AI isn't quite there yet. So if you go too crazy with that, it might cross the streams in a way that hurts you reputation-wise, right?

Yeah.

And that actually suggests some of the additional layers that I've built on over time since then as well. Because one big thing that I have felt limited by with everything I described so far is I'm not comfortable taking myself out of the loop. I'll do, you know, I'll have it. And I will say, almost got to this earlier and somehow we went a different direction, but How has it changed my behavior? One is on calls, I'll sometimes now find myself asking a question with the idea that like, I want to get the answer on this in the transcript so I can make sure that I can come back to it later. And I, you know, would I've not asked those questions previously? I'm not sure, but I, I do have that sense in my mind that like, if this person says it now, it'll become something that is like durably accessible to me. And that's a pretty good feeling that I do enjoy taking advantage of.

Yes.

The other big thing is very much like you said, with the client goes away, way less time in Gmail, in, you know, in probably a lot of different web apps, but Gmail, you know, and I have also used Shortwave quite a bit, but I, I'm now much more on the command line. You know, it's just like, even for something, check out, you know, scan my, scan my inbox, see what's going on. Or even like, I got one sponsorship inbound, you know, like that used to be something where I would have to go into Gmail and to assemble information and, you know, out of like a template and then attach something. But now that's a skill. So it's just like, you know, run the, the episode, the sponsorship sale skill in response to this inbound go. And it's amazing how little time you can get away with spending in lots of different web or desktop clients. But I'm still not that comfortable Taking myself out of the loop, right? The rules that I have for the Claude code on my main personal computer, the one that I use, is like draft, but don't send, you know, give me a link to the Gmail draft, but I'm still gonna open it up, read it at a minimum, usually edit it. I sometimes feel like I'm probably too precious. You know, this is something that I wrestle with a lot. Like I'm sort of like, Was that email bad by Claude? No, it wasn't bad. Why did I feel the need to edit it? You know, is it, am I, am I making it not necessarily better, but more me-flavored in a way that matters? Possibly.

I'm very interested.

What, what do you think about that? I mean, I, I have another layer of solution, or at least attempted solution that I'll describe, but how do you relate to when AI tries to write as you?

I'm pretty much at the same place. I don't let it write as me. I have a very specific thing in the writing skill. Kai, my main DA, has all his own writing rules. So if he's gonna write as himself, I want him to have his own voice. I actually let him explore his own personality and come up with his own back history. So he's got like a full personality, back history, and then map that to how he writes and why he writes that way. So there's like a very distinct voice that he has. And he also knows that he's not allowed to write as me. So if he's using my email address, then he has to say, hey, this is Kai Daniels, DA, and then give the information and sign as Kai. Right. Especially if it's coming from my email address, which oftentimes it's coming from him. So that's more obvious, but I really never let it write as me for that reason. For a couple of different reasons. One, it's reputation damage. If something gets out and it's obviously AI, that would just be nasty. But the more important one is like, the quality isn't there. So that's number 2. But the last one is like, if it's doing the writing for you, it's doing the thinking for you as well. And I don't want to outsource that. I consider writing to be thinking, not operational stuff, but anything of any quality or like actual weight. I just insist on doing it myself because I consider writing to be thinking.

A funny anecdote that happened recently is, so I live in Detroit and I got an email from, I won't name the person, although I've invited them to come do a podcast and talk about the evolving social norms around this stuff. I got an email from this person who's like, Reasonably well known in Silicon Valley, you know, not a, I'm like the first, you know, 20 people from Silicon Valley that people would name, but, you know, definitely a name that people will recognize. And the email came on in the afternoon of a day that the Pistons were playing in the playoffs. And it basically said, you know, good luck with the Pistons game tonight. I don't know if you care about that, but, you know, if so, good luck, whatever. And I was like, I don't really know this person. that well, a few interactions over time. It was good enough to catch my attention. So I responded back and said, hey, uh, you know, thank you. But my question for you is, do you care about the Pistons or is this just a flex of your personal AI CRM? And if so, it is like a pretty effective one.

Yeah.

So the, the response came in 2 seconds. AI, baby. And I was like, that's really interesting. Also, then I noticed that in the subject line there was a misspelling. It was good luck, L-U-K. And I was like, huh. So this person—

Wonder if it's out of the prompt.

I, I can't imagine. Yeah.

Yeah. It has to be, has to be.

So, yeah. So I asked that, I was like, how do you think about this? Like, you know, with all the things that I just described in terms of, you know, all this history that's queryable and all these articles and whatever on top of it, I feel like I have the infrastructure set up where I could unleash something like that on my personal network. And yet I've been very reluctant to, especially when it comes to the level of like prompting for spelling mistakes, you know, to like really make it seem authentic. I'm like, I don't know. That's, that seems a little much to me.

Yeah. So I think about this a lot of like what matters and why, and try to go like 4 layers deep there. So I think a great example is actually very similar to this basketball one. If you reach out to somebody and you say, hey, I saw a flower at the mall and it made me think of you. And if you wrote them a hand note, you know, 40 years ago, or if you texted them that 10 years ago, that has extreme value because— and assume that you don't talk to this person a lot. But you saw a flower and you thought of your friend. That text has extraordinary human-to-human value. It comes down to the effort. It comes down to the effort. The effort is what is appreciated on the other side. If you remove the effort, the value just went away. So I feel like there's only so much we can get from a human-powered— like one of my ratings inside of my Pi system is state of my personal relationships. How am I doing? Well, I don't want the rating to go up if, if I have one of my cron jobs be, I've pinged all my people, that shouldn't give me a good score, right? Because I haven't done the work. So I, I think that whole effort mix there is like really important to, you know, like what actually do people care about? And for human-human interaction, I think it does come down to the effort on the other side.

It makes me think of gift giving too, which is another skill that I'm currently building. And I would say I've, I've never been a great gift giver. With AI help, I think I've done quite a bit better recently, although certainly, you know, still not elite, but Yeah, it does. I think there's still a huge difference between like, I went and opened up Claude and had a conversation about you and we landed on this idea and now you get this gift. The old adage, of course, the thought that counts. It's the thought that counts. I do feel like I'm on the right side of that when I use AI assistance, but somehow if it became like totally automated, you know, if let's say I was able to get to the point, which to be clear, I've not achieved, but if I was able to get to the point where I just like load up all my birthdays into a calendar and the cron job does, you know, fully autonomous gift giving. And objectively, my friends like, and family score the gifts I've given higher than the ones I would have counterfactually given on my own. You know, am I, is that good? You know, have we advanced as a society? Not sure.

I just thought of like, this must've been a movie or something highly traditional and kind of sexist, but I'm imagining like This guy is traveling all over the world, like this rich husband or whatever. The wife is at home feeling neglected, and a box comes in the mail, and she opens it up, and it's her favorite flowers and favorite chocolate, and she lights up. And then she looks at the note and realizes, damn it, and realizes, recognizes all the signals That it was his admin, his secretary, that actually was thoughtful enough to do this. The flowers are no longer good. He didn't think about it. Someone else did and basically faked the action. And I think, you know, this whole thing with signaling and authenticity. I've read a whole bunch of books about this. Will Storr is one of my favorite authors on this. It's like, what is the signal? What is the authenticity? And there's always the faking cat and mouse game of this. And I just think that's gonna be really, really important with this whole AI thing, 'cause especially as it relates to authenticity.

So how do you, I mean, it's interesting that, and this is not something I've done, it's interesting that you have AI going through and scoring the health of relationships. I'd be interested just to hear a little bit more about that and how it's working for you and like how you, you know, what does it prompt you to do and, um, and how do you make sure that, you know, you avoid, uh, unwanted AI feedback, like inflating your score?

Yeah. Um, so it's seeing how I'm interacting with it. I don't have it watching everything yet. I'm still working on ingestion for a few different systems. But to the extent that I'm talking to Kai about relationships, that's kind of what he'll see at this point, which right now it's mostly building apps and doing a bunch of other life stuff. But the idea is, I mean, my ultimate idea for all of AI actually, but especially for my personal AI, is that there's only kind of one end state for AI for me. Which is the navigation of current state to ideal state. It's just that simple. So in my telos, which is my primary document that runs everything, and it's also what I do on the business side for consulting, my telos primarily has, or I've made it basically a first-class citizen, is current state and ideal state. So in my current state, I have the fact that I maintain my relationships with my friends. And I kind of have like rings there for like, you know, family. I need to be reaching out to them this many times as ideal. So when those numbers aren't where they need to be, that's showing in a score. It's actually in my status line that these are decaying, right? And the same thing for physical health, the same thing for a bunch of different things. But the overall Arching idea there is that it is simply, its job is to get me to ideal state and to understand and capture properly the current state. And then the whole entire game is the transition, is the navigation, which right now is a bunch of cron jobs and a bunch of other stuff. But my view of this is like, especially for enterprise AI, but also for all the personal stuff, That is the game. The game, very simply, all these agents, all these harnesses, it all like fades into the background. I believe we're going to end up with one DA. Most people will end up with one DA. And your DA, of course, you can have others participate as well, but I think you'll have one primary digital assistant. And it's the one managing all that other stuff. And it's the one who's the expert on what's currently happening and what, what your ideal state is. Obviously you're the one providing ideal state. And then, yeah, while you're sleeping, while we're in this conversation, it's over there working, it's researching, it's doing all the work. And yeah, I just have as one of those facets is relationships, family and friends.

How do you articulate what the ideal state is? I feel like I'm not that confident, or I mean, I guess it can just be an iterative process unto itself, but like, I'm intimidated by the notion of trying to articulate an ideal state.

It's, it's wonderful. It's a wonderful process. I think the whole Telos process is just fantastic. But this, I've always had this current ideal state thing, but I've now promoted it to be the primary inside of Telos. It's like, okay, what does an ideal day look like? What is an ideal— and it, inspires you to— it really challenges you. It inspires you to be very honest. And then the moment you start wondering if you should write it down, now we're making progress, right? And, you know, for me, I mean, it's got— what it does is it starts to reveal ego. It starts to reveal, okay, what do I really want from life? What's the story I'm telling myself about what I want versus what I actually want? And I love the distinction between those. So it's like, what does your day look like when you wake up in the morning? What do you see? And if you actually start filling these things in, combined with the other context that your DA has, it's going to be able to do a pretty deep psychological profile on you, right? And really understand what you're about. And if you've added in also your challenges and like all your other stuff that you're working on, It's just going to give it a whole lot of insight. So the way I do it is like, what does a day look like? What does a month look like? What does a year look like? Some classical ones like, where do you want to be in 10 years or whatever? But those are just like different angles of approaching it. But yeah, ultimately I would like to be doing exactly what I'm doing. I would like to have so much money that like, I get to spend time flying around, giving money away. I've seen a few people. It was one of the first episodes that I loved for My First Million. Is that the podcast? And it was a guy who basically had a private driver wherever he or his wife went, always had a private driver following them around. He actually has private planes. And most of his work is on doing his projects and then flying around to parties where he gives away money to the people that he's done all this work to find the best people to give money to. And I'm like, are you kidding me? You get to just give money away where you've maximized the amount of impact that's going to come from giving away that money. But, but it's also associated with ego stuff. in materialistic stuff because you get to fly around, you get to meet people, you get to see different places. So it's like a mixture of like intrinsic but also fun. And so those are the types of things I put in the system. Not so much like I want this amount of money, but I want this type of lifestyle, which obviously requires this amount of wealth or whatever. And the more of that stuff you put in there, I'm telling you, it's just like, it requires a lot of introspection to be able to even write it down and even think about what you're trying to do. But I feel like the more I understand that, the more I can reverse engineer to the systems that I build.

Okay.

That's definitely gonna be interesting to do. And that's gonna be one that I can't entirely delegate to the agents, obviously.

Oh no, it's very personal. Yeah.

I would say my—

I do it. I, Sorry, I do have a /interview. /interview is a prompt into the telos and into the ideal state. So I actually do that with a lot, a whole lot of my system is when you have a question, go into interview mode.

How often do you do that?

It prompts me quite a bit, both on like building and coding. But yeah, anytime it's confused, it's not sure about a goal. Oh, we might want to talk about the algorithm at some point. I don't know. I can't remember if we talked about it last time, but with the algorithm where you're chasing an ideal state inside of even building an application, just a pure coding thing, if there's ambiguity, you're not chasing the proper ideal state and you can't turn it into discrete testable criteria. So yeah, the interview is just Essential for that.

So put a pin in that one. I'll come back to it.

Yeah.

I can tell you how, how it's changed my life maybe next time we talk. I'd say in contrast to that, and I wouldn't say it, it's still been effective for me, but, you know, sensing something left on the table there for sure. But what I've typically done over the last few months is really just sit down and be like, In my gut, what can I advance today? Or like, what's kind of slowing me down? You know, what would I love to be able to just, you know, do from my phone? I guess one, one ideal state that I've articulated a few times is less time on my computer, more exercise, more time outside. That would be a clear win. So—

There you go. I mean, that's great.

Trying to get it to the point where, but unfortunately still, I wouldn't say I've really got that win yet. I might be hitting a tipping point, but it's too, too soon to tell. But one of the things I've been wanting to do is get to the point where I can just have the phone on me and feel as empowered from the phone away from the computer as I feel at the computer. And I wouldn't say I've, again, it might be, it might be hitting a tipping point, but I haven't really achieved that yet. One, one little detour I'll take and then, then I want to come back to the, your notion of like everybody's gonna have one DA, um, is interfaces. I did a, another one of these sort of, um, show and tell type episodes with my friend Steve Newman, who is, um, you know, 40-year professional software developer, founded a company that was sold to Google. He's had, you know, several exits over time, uh, very accomplished guy. Now he's, you know, vibe coding, uh, up his own personal thing.

Of course.

The rest of us. The big thing I took from him was create interfaces. I was kind of like, for some reason sleeping on that and doing everything through the command line pretty much. And, you know, you kind of, when you have the ability to ask these questions and, and it has such deep context, you often can get pretty good answers, you know, even including like sometimes if, um, I might have like 10, this might happen in this conversation, right? If I have 10, um, sort of memory hog threads in, uh, open in the terminal. And as I'm, you know, building up big video files here locally that are waiting to get uploaded to the cloud, if I run outta disk, I might just go kill those. And then I'm like, oh, what did I have open and what were they? So one way to do that is to ask Claude, hey, go back and summarize the last 10, uh, threads for me and like tell me, you know, what was finished and what wasn't finished so I can kind of pick up what I need to pick up and hopefully not lose things. But I was finding that I was kind of hitting a point of like some cognitive overload where I was a little bit like, what exactly have I built? And, you know, which threads did I finish or didn't I finish? And where do I have like uncommitted changes floating around? And Steve's feedback was definitely a, a phase change for me where I was like, oh, I should be building a lot more of my own custom little interfaces, which I now have one that helps me manage the— I used to have a, a skill again, all through command line to help produce a podcast episode. Now there's a UI that, you know, just makes it a lot easier to see the images that get created for the art and to watch the, the clips that get made and, you know, so on and so forth. Um, what would you say? Okay, so the, the interfaces.

So that's what he means by interface. Uh, 'cause I was thinking the interface to talking to your DA, which I think is the big advancement of like OpenClaw and Hermes. Um, largely like 80% came down to, I could just talk to this thing anywhere over Telegram or, uh, WhatsApp or whatever. Um, but you're talking about also just being able to see and visualize and stuff like that as well?

Yes. Although I do wanna come back to talking to them too.

So interesting. So, um, I am, I have an open tab right now. I'm building an app called Surge. Internal app for me, which is, um, actually I could share it with you. Uh, so basically all sponsor management. So, um, we have not only the podcast, but we have YouTube videos, uh, with interviews. We also have, what else? Uh, newsletters. We got 4 or 5 different like sub-products for, for sponsors. But as you know, there's the interaction point. There's the agreeing on copy and stuff like that. Then there's like the, okay, it's been approved. Then it's like, okay, here's what it looked like when it launched. Then there's the metrics and all of that can be done via emails and it can be automated via emails, which I'm not doing yet because of the authenticity thing. But the other option is to just build them a web interface. So now I've basically built a web interface where they authenticate as them, as their company, they come in, They could see that entire process plus all the different campaigns. So I think this definitely qualifies as what you're talking about with interface of like what was being done, like raw back and forth using previous tech. And can you unify that experience in some sort of way? Um, so yeah, I, I'm in the middle of doing one of those for, uh, basically sponsors for the business side. Nice.

Do you have one that is sort of your Like when you said like, uh, you know, when relationships are not maintained, it hits your status line. What is that status line? Is that another thing that you look at in a browser or otherwise?

No, it's just right here under, um, uh, it's fresh colon. And then, um, I've got like 5 different things. So Telos, projects, um, yeah, personal, like all those different ones. So different aspects of my life. And how high quality or fresh they are. So if the quality is low, it shows that basically the lowest of freshness or quality. So if I haven't updated them recently, it also starts to decay. And it's just a way of making sure I keep my contacts updated.

Gotcha.

And that literally just shows like when they threw up in a new session.

Yeah. At, at the bottom of my terminal in every session is the Pi status line.

Interesting.

Very small little hack that is kind of similar, but really helped me a lot was creating a hook to rename sessions automatically with like a summary of what had happened. And now at the bottom of every session, when I, so when I'm flipping through tabs, I'm like, what was this? You know? And it's obviously a, a wall of text so often. And it's like, whoa, trying to orient myself to remember what this particular thing was. Now just a one-line summary at the bottom that's like, this is what we intended to do. Here's how far we've made it. Here's what's pending.

Yep.

Like, it's such an amazing little refresh. There's so many of those little things I find that as, as much as, you know, the good folks at, uh, Claude Code and OpenCLAW are shipping relentlessly, there's still so many little enhancements like that that just make life so much better with these tools. So, okay, interfaces, that was that. Um, so the one DA question. So I have had this sense, I think we're basically on the same page around like, you definitely don't want your AI to be pretending to be you. That feels risky and wrong at the same time. Um, but then I have the question of, okay, well, I do wanna start to delegate somewhat larger projects to the AI.

Yep.

And I do wanna push just how far can they go autonomously? You know, could I, for example, have an AI, and I'm gonna run this experiment coming up soon, you know, could I have an AI like serve as sort of a booking producer for the podcast?

Yep.

And, you know, do that without me having to approve certainly every outbound email. You know, maybe I wanna approve some strategies or whatever, but like how, how high up that, um, abstraction stack can I go and get good work from the AI? So probably a lot of different ways to think about how to handle this. What I ended up doing is, first of all, for a couple of reasons, buying a separate computer. So now I've got my, Yep. Laptop and the Mac Mini sitting, you know, right next to it on the desk. The Mac Mini's gonna be there. You know, the idea is, and I even have a battery, um, backup so that, uh, if power goes out, you know, the, the thing can sort of stay online. Um, hopefully I also probably should put a battery backup on my Starlink, but that's another, um, that's another layer. Um, but at least, you know, the kind of processes, whatever, don't get immediately interrupted if there's like a, you know, small power outage. That was my, you learn these things the hard way. I had I had a power outage. I was away and I couldn't connect to the laptop at home. And I was like, why did this happen? Sure enough, I go home, all the clocks are flashing. And I go, well, if there's one thing I'm gonna put a battery on, it's gonna be my Mac Mini. So another reason for that too was just like when I was doing manual, not manual, but you know, when I've, with the skills that handled the podcast clip production, um, and also been experimenting with something around having Claude make music videos for the Suno songs that I'm now appending to the end of every episode, which that's, that's probably the most like greenfield, just like let Claude be Claude and have fun kind of thing that I do. But it is fairly intensive on the computer to be processing video and rendering things frame by frame. And, you know, there's all these like motion skills, whatever. You can do all these animation type things. But video files are still heavy and like rendering things is still kind of a heavy process. So I was noticing that it was slowing down my computer. So I was like, at a minimum, I need a, another computer to just do that stuff so it's not blocking me. Um, but also, you know, can, can this sort of be the agent's computer, you know, where they can really go to town, be themselves, you know, do their thing, um, take on these like somewhat larger projects. So the mental model I have now is my own laptop is obviously for me to work on.

Yep.

And the Claude that I have there, and I'm also starting to experiment with Codex a little bit. I'd be interested in if, if you've, um, also, you know, started to diversify at all away from Claude. Claude's definitely still the main driver, but, you know, I hear great things about Codex too. So we're, you know, don't wanna be, uh, missing out on anything. But those on the laptop, I think of as high access, 'cause they do have, you know, via the browser, if nothing else, like I'm logged into everything.

Mm-hmm.

Um, but low autonomy. So their instructions are basically do exactly what I told you to do. You know, take a little bit of liberty in terms of like searching for information online, certainly searching through my own, you know, personal context. Um, but like, don't send emails as me, definitely don't impersonate me, uh, and don't go, don't go beyond like what I explicitly told you to do. High access, low autonomy.

Yes.

On the laptop, the idea is it's, it's gonna be the reverse, relatively lower access, but high autonomy. And this opens up like a ton of questions in terms of how should one think about structuring that? And I can tell you, this is where I really want you to, uh, roast me, especially in terms of security, but, you know, kind of everything that comes to mind. I'll tell you kind of where, I'm at, um, there's a lot of details to it. And, and to be clear, like, AIs have been instrumental in helping me identify the tools and set them up and, and all these kinds of things. Um, access is a real pain in the butt. So I guess for starters, how do I link up my 2 Mac computers and my phone? What I've landed on right now is Tailscale for Private, uh, VPN creation, which is, I think, amazing. Although I definitely wanna understand, right? And maybe you can help me understand better, like what I'm exposing myself to with doing that. Um, but this makes it really easy, at least, you know, as long as the security problem isn't so bad for me to connect these computers. And then there, there are multiple ways in which they can be connected. I use the Screens app. on my phone to log into the UI on either the laptop, if it's like still sitting at my desk and I'm away, or the Mac Mini, which is always there. And then I also have Termius, which is a, um, Mm-hmm. a mobile terminal client that SSHs in again through this, you know, all through the, the Tailscale private, um, network and can then, you know, go in and do shell stuff on, on either computer. Um, and this has been like pretty good for setting. It took me a while to get to it, but it's, it's now pretty good, you know, where I can kind of have pretty seamless connectivity from a phone to both computers regardless of where I am. And, um, and that's key because I just keep finding that like something always needs a little reboot, you know, it'll like work for days. But then, you know, for some reason the Telegram channel just like isn't connecting anymore. You know, why isn't it connecting? Restart OpenCLaw, restart Claude Code, you know, and then it'll start working again. But if you, if you can't reach that computer in a way that gives you the level of access to be like, I'm gonna just run this command, um, then, you know, you take a trip and you're 3 days into your trip and the thing doesn't work anymore and you're like, ah, I went to all this trouble and I couldn't, You know, and now I, I'm still somehow locked out. So I think that networking setup has been really good for me. Um, but I'm, but I'm, I'm so, I'm very mindful. I used to never really care about security. I always felt like security by obscurity was enough for me. Now I'm like, well, not in the AI, you know, era of global mass surveillance. It's not right. And obviously Mythos and everything else. So maybe first concrete question, how would you, uh, feel about that setup from a security standpoint?

Yeah, I don't, I don't think it's bad. I don't think it's bad. Um, I do worry a little bit about small apps that you use, um, to the extent that anyone uses them that are just kind of useful and you're just like, well, it couldn't be that big of a deal. But those smaller companies, the smaller the company, the less chance they have a security person. And like, if they have passwords or whatever, like, they just might be part of a breach. Like, at any point, they could easily be part of a breach, especially with like agents running around, basically hacking and doing bounties all the time. So I worry about like, how many companies have I given access to? So that's my first sort of heuristic is like, give anything sensitive to the fewest number of companies. I think Tailscale is a great solution. There's also one called Headscale, which is an open source version, which you can kind of run like just on Cloudflare or whatever. So I'm using both of those. I like to not have anything facing the internet because of the kind of the mythos effect. But I mean, this is my background is actually doing attack surface Attacking and monitoring. So having, because IPsec and PPTP, the VPNs all listen on the internet, which means a worm or something, a vulnerability can hit them. Whereas Tailscale is outbound. So it's not, you don't have anything open technically. The downside is if Tailscale gets compromised, they're just going to walk around on everyone's internal network.

Right.

And unfortunately, it gets, it's pretty easy to have a prompt that says, what are the highest leverage compromise points? And let's steer our attack towards those types of things. The only piece of security that I think someone like us has there is that if Tailscale were to be compromised, they would be hitting other places before us. And hopefully we would know beforehand and we'd be able to turn everything off and block everything or whatever. But Um, that is a major consideration is where is your choke point? How many people are you giving your stuff to? But in general, I would say Tailscale is not a bad solution.

Okay. Um, sort of, I guess I'm still, that boils down to, in some sense, I'm still security through obscurity. Um, a couple of follow-up questions on on that and, and maybe a couple other tools as well. So the other tools I'm using to share access, one is 1Password.

Mm-hmm.

Um, where I've got a family account, vaults that are specifically intended to be shared with agents. Um, command line installed on the Mac Mini and the The agents can access passwords through the command line.

Hmm.

As of now, I think they have more advanced stuff, but it might only be at the moment for enterprise. What I was able to, you know, immediately sign up for, for a few bucks a month or whatever, as a consumer, did not have a human in the loop to approve the sharing of a password with an agent at runtime. So it was instead, uh, the solution I came up with in consultation, of course, with Claude was have 2 different vaults and just have the agents instructed that this vault, which is the agent's auto vault, is you're just free to use that whenever you want. You know, so things like Brave Search, Ceramic Search, whatever. I mean, all, you know, a bunch of actually quite a few different things. Um, API keys. Well, actually I should say I'm, I'm using in physical for API keys. So passwords, um, you know, would be a lot of shared accounts. You know, if you want to go remove a background, well, again, there's an API key for that too. Um, increasingly everything's kind of going headless, but nevertheless, there are a bunch of passwords. They're just, you know, you green light, you can use them whenever you want. Then there's also the ask. Vault, where on a technical level, it's the same access, but they're instructed to ask first, send a message, get an approval before they would grab those passwords and, you know, put them into, uh, a web browser. And then with access tokens currently using in physical, I'm not even entirely sure why have 2 versus 1, like probably could get away with.

just one.

Um, but I got recommendations from InPhysical, so I've also got that spun up. And it's a pretty similar structure where on the main laptop, you know, all the keys are there. Some of them are in a vault, which is shared, which then allows the agents to use it at runtime.

I don't really understand the security claims that these companies make.

I mean, it is, you know, I, I'm like, Am I getting more or less safe by like putting all my passwords into the one password cloud app or the physical cloud app? And then you read things on their websites that are like, this has like, you know, double super encryption protection. Um, and I, I sort of feel, oh, great. You know, I don't really understand what that means, but it sounds good. Um, how, how, how confident should I be in storing my stuff in those solutions, do you think?

Yeah, yeah, it's a great question. There's a lot of, there's a lot of confusion around this. Um, I would say it's the type of situation where if scrutiny is low, like if nobody cares about attacking that company, um, pretty good security is probably enough. The problem is Somebody might care because it's just so easy to make a list of all the apps you should go after if you want people's credentials. It's so easy to build a campaign, right? Um, not to give too many ideas here, but you could just say, okay, find me all the top podcasters in AI. And, um, my goal is to basically compromise them completely and fully.

An extremely high value target.

Yeah. And just be like, I mean, I don't actually want to give like the full prompt, but you could make a single prompt that just does all this harvesting and builds like perfect spearphishes exactly for you, finds every single vendor. And fortunately, because I'm also talking a lot about, I talk about my stack, you talk about your stack. So it's like, we literally know the companies to go after. And getting back to the answer to your question, if somebody skilled targets somebody directly, especially now with these good models, most companies' security is not good enough to withstand it, especially if they have any sort of attack surface, if they have employees, if they can be spearphished, it's fairly I wouldn't say trivial, but it's fairly easy to, to get into these companies, especially if you have days or weeks or months to keep trying. So, um, I would consider anything that you have in cloud small companies to be eventually compromised.

Right.

So the question is how soon and what do you have in there? And that's why I say limit the number of companies. So I try to use as many Google and Apple things as possible because their security teams are massive and they're just constantly watching this stuff. And if something were to happen, it would happen to a lot of people at the same time and it wouldn't happen to us first. So the signal would come back to us pretty quickly and we could pull back. So screen sharing, password management, I try to use Native OS stuff as much as possible. And there is now the ability to actually use Keychain or to use vaults. Another thing that's really solid is like AWS Vault for storing credentials. So that's another option that you have. I would say go to the bigger companies and use the ones that are going to be attacked the most and have the most security people working on them because it really is security by obscurity that's protecting the smaller companies.

So for something like one, I think that's, that's probably good advice and generally try to stick with the, the titans as, as much as possible as well. I don't know that they have, maybe they do, but I'm not aware of like a Google or Apple product that would easily allow me to share my API keys with agents, for example. Uh, so if you're aware of a solution, like, you know, please point me to it. But if, if there isn't one, Um, I guess I, I'm still a little bit confused on the claims that companies like this make because they have the sort of double encryption idea, which makes it seem like they're saying that even if one of their employees got hacked or even worse, like even if one of their employees went rogue, the idea is supposed to be that somehow, even if I'm a full access, 1Password, You know, engineer in good standing, I still wouldn't be able to get Nathan or Daniel's passwords, um, because of something. Uh, but it sounds like you basically just don't think that that's really that—

It's strong. Not true. No, it's not strong or true, uh, in many cases. And, um, so I've, I've been on like all these sides, so I've been an actual auditor for like You know, PCI auditor. I've worked at Apple and like all the internal companies, and I've done all the security assessments. And I've also been on both sides of the audits and actually performed audits. And the situation— and I've also been the one in charge of making the security claims, right? And helping marketing actually match it with reality. And what ends up happening is the security team will be like, okay, here's what we're shooting for? And marketing's like, okay, so I could say we're end-to-end encrypted. Well, no, no, not end-to-end encrypted. Marketing doesn't know what the state of the world, right? So they're making claims. The security leadership is making claims. Then you have like what's actually true that the security team actually knows about and what maybe what they don't know about. There are so many different steps here. where one little thing can make it true. It could actually be true at the time of the public release, you know, coming out. And then it's not true a week and a half later because one little config change happened, right? And there's just config changes happening all the time. So it's just most of those claims, the smaller the company, the less likely that is to be true. Put it that way, because they're barely trying to just have a product and get it out there. They might not even have a security team or someone in IT who's good at security. I would say the larger the security team gets, the better the chances, but it's still not a guarantee. I would consider those claims from smaller companies that you've barely just heard about, not quite with a grain of salt, but Pretty low, uh, efficacy.

So for private networking, you use an open source thing and you run it in Cloudflare. Does, is Cloudflare like one that hits your sort of titans bar? And so you feel more comfortable running an open source thing in their infra for that reason?

It, it does hit my titans bar for a few different reasons. One, they have a very large engineering team. Uh, 2, they're being attacked constantly. Um, and they're just like super cutting edge, but that's not sort of the real reason. The real reason is that the attack surface isn't, um, obvious, right? Because it's running in like workers. So now you have to go and attack the workers, or you have to go and attack the main Cloudflare account, which means compromising Cloudflare. In some sort of major way. Oh, once again, you're trying to beat down a massive door that everyone is trying to beat down. And where if that door came down, everyone would know. Same with like GitHub being universally compromised, people would know pretty quickly. So I'm looking for something that has that sort of like alarm on the door. And the other thing is like, There's nothing in Cloudflare to go like, go and check once you've compromised my account to go and find this. I mean, you could use AI, of course, but it's not sitting in like an obvious location. So it just, there's multiple layers that just make it a lot more secure. I still use Tailscale. I'm just sort of deciding if I'm gonna turn off Tailscale and fully use this instead.

Gotcha.

Do you do similarly for password or token sharing?

Um, so I mostly use, uh, local files, uh, combined with Keychain. So all my super sensitive stuff is actually pure, pure Keychain, which is local.

So how would you share that across? And maybe this is another Give you just a little bit more of kind of what I've got going, and then you can riff on what I should be doing differently and better. Um, something that took me a while to figure out actually was, you know, obviously we've, the AIs are not very reliable. They're in some cases quite gullible. They're subject to prompt injection and, you know, they're subject to adversarial attacks, right? So as I think like, oh, I want to have my lower access, higher autonomy, agents go out and do whole projects and, you know, interact with the world through potentially like multiple rounds, um, through potentially multiple different, uh, modes of interaction. And, and that's another thing I wanna get your take on. But like, I've given these agents on the Mac Mini their own Gmail, for example. A lot of accounts, they're gonna just kind of piggyback on mine, but they do have their own Gmail. Um, so, you know, they're gonna, bump up against a lot of stuff out there. I'm not hide— they're not instructed to hide that they are AIs. They're instructed to be upfront about the fact that they are AIs. I finally broke down and gave them names. Um, I call the Claude one Aide, A-I-D-E, or Aiden if I wanna do a full name. Um, we had to make sure there's an AI in there, and I like the idea of it being the Aide. And then the OpenCLAW one, um, is currently called Clay. C-L-A-I. And the idea obviously is, you know, can mold it like clay over time. Um, I've been very reluctant to, to give names, but I finally landed on names where I was like, okay, there's enough of a wink with the, you know, with the names including AI.

Yeah.

And the names of AID and Clay feel like sort of not people, but like something that I can kind of quickly refer to without, you know, hopefully, um, either tempting or lulling myself into some sort of AI psychosis. Um, so I finally found names I feel like both psychologically comfortable with and, you know, like they're decent enough names. Anyway, the AIs are instructed to go out into the world as AIs, you know, use these names, but certainly never lie. I'm still trying to find the right balance of like exactly how forward do I want to be with it. You know, I don't, I don't think it's necessary or probably great for their success for them to open every interaction with, hi, I'm an AI, you know, working on so-and-so's behalf. I think you kind of want to show that there's like some actual quality and value first. And then when people, you know, either see that at the end or maybe if they ask, you know, they find out, then hopefully they've been kind of convinced that there's enough quality in the interaction that they're not, you know, totally put off by the— hopefully they're impressed by the fact that it was AI and not put off by it. Um, but anyway, as they go out and do all these things, I think one big trend that I'm expecting more and more of is as people figure out, oh, I'm dealing with an AI, um, people are gonna start to mess with it, right? So now I'm like, I wanna have some way where the AIs can, where the, these autonomous agents, um, I want them to be able to come back to the main agent or me. And ask for more information, but I don't wanna give them everything. I wanna give them enough that they have, you know, it's not supposed to be no, it's low con— uh, you know, it's, it's low access, but it's not no access and it's lower context, but it's not no context, certainly. So one thing I've done is taken the wiki that lives on my personal, um, laptop and made a version of that that is the assistant version. Um, the heuristic I used for that was just saying, pretend this is a human assistant that I'm onboarding and make a version for them. And that would mean, you know, they should have contact information for people. They should have, you know, a lot of different things. But if there was ever something that that person told me that made it into the summary that they would be like, why the hell did you tell your assistant about that? You know, then that shouldn't be there, right?

Um, yep.

So that's one layer of of context that I've kind of tried to, you know, hold back anything that people wouldn't have wanted me to share, but still give it enough to be capable.

Mm-hmm.

Um, still sometimes it will need more information. And so I've set up a message bus where the, and it's hosted on the Mac Mini. So any agent, whether it's me, uh, or That the autonomous agents on the Mac Mini, they can write to the message server. The laptop is constantly pinging it. And it also like sends me a, there's another interface. It sends me a push notification to the phone when there's a new, um, question for me. And we can like give information, but hopefully not too much information.

Right.

So, and hopefully we would know, wait a second, like, why are you asking for that? You know, if somebody's kind of adversarially jailbroken, whatever my, My agents. Then there's also the question of just like, okay, we're all on this Tailscale network together. How do we make sure that the laptop or, you know, the, um, the Mac mini agents can't just like root the laptop? So what I've tried to set up there is kind of one-way hierarchical control where, and I've, I've structured this in a couple different ways. One is like the Mac mini cannot SSH into the laptop, but the laptop can SSH into the Mac Mini. Um, and my phone can also SSH into both. And then on a repository level as well, I have kind of a hierarchy that's like the main top-level agent that knows everything is the like second brain repo. And I call that, um, you know, Nathan's Personal AI Infrastructure, you know, with your inspiration. And then different, um, repositories kind of sit under that and have like Partial information, and some of those get mirrored across the different computers and the, the other agents also have access to them, including WriteX. They also have their own GitHub, by the way. Um, so they can write, you know, and make commits to GitHub and push stuff to GitHub, but only in certain repositories. So there's like the, the second brain one just lives on the computer, is not shared with the agents. The podcast production repo that does all the things that is shared and both can use it. The shared wiki is of course shared and both can use it. The, you know, there's more and more of these things, you know, happening over time, right? Like, now using Mercury credit cards also to create often individual merchant limited credit cards that I can then give over to the agents and say, okay, you can buy groceries on Shipt, but that's literally all you can do with this card, right? So I'm kind of limited by—

Yeah.

Willing to take a little risk that they buy the wrong peanut butter or whatever. But I'm, I, as long as it's like, you know, a transaction under $500 a week on Shipt, like I can live with whatever, you know, could go, could go wrong there. And so this hierarchy of kind of information flow and like who sits on top and, and who can see what Beneath them has been interesting. And then there's also like shared tools that sometimes are kind of across repo, right? Like, you know, the Brave Search API, for example, like I need that from my main second brain, but I also need that from the podcast repo. And then the agents, you know, themselves also kind of need it. So there's kind of this, the lowest level thing is just like shared utilities. I think last comment, and then I'll just ask you for feedback is, A big unlock I think has been realizing that my top-level second brain Claude code agent can change all these repos underneath it.

Yes.

Without needing to be it. So I think an early version of me was like, I've got these autonomous agents over here, I'll go prompt them to enhance themselves, they'll make commits, and then that'll go up to the cloud. And now I've realized, It's probably best for me to just have this single agent at the top of the hierarchy.

Yes.

Change itself and also make the edits to whatever other repositories need to be edited. And then the command to the agents is like, you've got changes, uh, coming from the, you know, your, your sort of highest level AI supervisor, update yourself. And of course that could even be, that command could also be issued, you know, via SSH from the top level agent. But it's, it's less of a like update yourself as you see fit and more of a, as a, as a system, we've made some upgrades, like get yours and, you know, now you'll be using that in the future.

Mm-hmm.

Um, I'm sure I've left out some details there that might be relevant. So if there, if you see gaps in terms of how this works, um, ask me and then otherwise, you know, tell me, what do you think? What am I doing? Right or wrong?

I mean, I think that's overall correct. It sounded, I heard a lot of different repos in there. I think I'm trying to be more unified or simplified. So I have an unsupervised learning unified GitHub, which is essentially what are we doing work. It's so the reason I'm using GitHub for this is because it has so many primitives already built in. So you can use issues. You can actually comment on things. And what's cool about it is those replies and everything can actually be targeted by emails. So you can actually interact with the file structure or the system structure of GitHub. Kind of for free, like as a project management system with email or with GitHub command line individually. So what I have is I have separate agents. They're in Mac Minis. They're on a DMZ inside of my firewall. So they are essentially internet boxes. I treat them like cloud boxes, like, like an actual separate employee. They have their own personalities. They have a first name and last name. They have an image. I didn't give them a writing style because I didn't really need to. But other than just like be terse and concise and stuff like that. But they have their own Mac, their own Mac account, their own UL account, which is Google, and their own AI account. And the way I handle the access to skills and tools and stuff is just a GitHub repo. So, and all this is automated so that it's regularly doing checks. Now what's cool about the universal UL system is Kai has access to that one also, but all my, I have 3, Devi, Soren, and Mira. are their names and they're kind of broken up by different roles. But Kai can see all of them and the GitHub repo. They each can see the GitHub repo. But what's cool is I can say, hey, I have a project, blah, blah, blah, that gets automatically marked up as pending or future or whatever. Plus it's a project. So tags within GitHub is also a really powerful feature here. And what's cool is the agents can then go and look every 5 minutes at the repo to see if there's something new to be done. Like I just gave a resource task to Kai, which means I've given it to my overall system. I've given it to the company. And now whoever gets there first or whoever's best suited for the job, I haven't really sorted that out right now. It's just who gets there first. literally sees an open GitHub issue, it's unresolved, so it marks it as I'm currently working on it and then just goes and works and brings back the results. And now all of my AI, most importantly Kai, in my overall Pi automation can just know the state of the company by looking at the state of GitHub. So for separation, it's separate everything. on those individual boxes, including the AI account. And I'm using all of that through just Pi. So the other thing that gets you is the fact that each instance has their own skills and the shared skills are on GitHub.

So basically it sounds like you think GitHub could replace my custom agent message bus. Probably, probably could. I can just, I could use the GitHub app as like the place where I collaborate with, comment back and forth with, organize work.

Uh, yes.

Yeah, that might be a good upgrade. Obviously there's been a lot of work on GitHub over time.

Right now the twist is I think ultimately you wanna build your own, but I think right now in this particular moment, Their structure is so well thought out and so universal. Plus the agents know how to use it.

Yeah, no, definitely.

Well, so it's just like in the model. So I would say you, if you want to just like wait, I think a custom system will be, be better. But I think for the next year or 2, GitHub might be better.

When you create multiple agents, the only reason I So, I mean, there's, there's one kind of reason I have 2 different agents. One is like, it's, you know, the second brain versus more autonomous separate entity. That distinction feels important. And then for me, like, why do I have multiple agents versus just one of these more autonomous agents? It really came down to, I wanted to use both Claude Code and OpenCLAW and, you know, maybe other things.

In the future as well.

I'm hearing good things about Hermes Agent and, you know, it's probably gonna be more and more, um, good candidates. So I wanted to try both of those technology platforms, but that was really the only reason that I had separate, you know, in terms of like, why is there AID and Clay on the Mac Mini? It was really just that. Um, Do you have other reasons? I've heard different takes on this. Some people, you know, kind of think that there's a lot of value in creating different roles for different agents. Like you are the marketer, you are the engineer, so on and so forth. Others have said, which was a little bit more my intuition, that like, well, the, it's the same model doing all these things. So, you know, does it really need to have like a whole different identity? Um, and obviously that could just be like user preference and kind of. you know, your own mental models of the, of the world. Do you think that, does that all kind of boil down to you to like personal idiosyncratic preference or do you see structural or performance reasons to create multiple different agents with different personas?

Yeah. Yeah. Great question. Um, I, I think the, uh, the human-like model is really powerful. I think the fact that we're so familiar with humans and human boundaries, that it's just natural to, you know, treat it more like a human because you understand that humans have capabilities. You understand that you allow this role in your company to do certain things. So Devi is assistant, Soren is engineer, Mira is marketing, social media. So I have them separated like that. Every agent platform has the ability to do subagents. So in OpenCLAW, you can actually build one agent and separate all these as subagents. So you don't actually need a separate one. I don't like that because it just complicates the way we think about it as for a human. I also like separate boxes and separate accounts just from a security standpoint. So they all sort of collapse and triangulate on role, individual personality, access control, security, everything all. And that's why I did it. And that's why they have separate names, separate personalities. I have images for them. So I'm really kind of leaning into it, not because I believe it or believe that they're conscious, but I think it's just easier for humans to handle everything and think about and conceptualize. So for example, Devi is the one— I haven't done this yet, but once the AI is good enough, or my scaffolding is good enough, that will be able to just handle client interactions, right? My other agents are not going to have access to all the different customer information. This is the reason I haven't done it yet. And by the way, the number one security system that you just have to have for this stuff Is you got to have good prompt injection defense. It's like the number one ingress into your entire system. And it's the other reason I like these blast radius containments of a completely separate box. And the Mac minis can't talk to each other, even though they're in my closet, they can't talk to each other. And they can't talk to anything on my LAN. Yeah. And they can't, Yeah, they can't talk physically across the LAN because they're isolated at layer 2 and 3. But they also can't talk, for the ones that have Tailscale, they can't talk to each other either. So Kai, getting back to your other main point, Kai is like an extension of me. So he's helping me manage this entire system because he has full access to everything. And that's like ring zero. And then they are considered employees, right? Which is why they have all those different separations. But Kai can hit them on the command line. Kai can SSH. Kai can do anything to their configs, including update them. As far as continuous updates though, they are updating via cron. So they're just checking GitHub to see if there's any new skills all the time. Um, and that's how they do their updates.

That reminds me of another question that I had. How, uh, we're seeing all these like supply chain attacks now, right? Where we've got, um, I don't know, recently it was like all, all sorts of, um, TypeScript repos were, were compromised for a minute there. I turned to Claude and said, you know, here's the news item. Like, am I vulnerable to this? What should I do? Uh, fortunately for me in that instance, it said, no, we're not using any of the things that have been reported. So I was like, okay, good, good enough for now. I've seen people both saying you should, you know, security updates have never been more important. And also you see people now doing these like, don't install a package that's less than 3 or 7 days old or whatever. Um, how do you think about that? How do you balance that? And also how do you, for, uh, for prompt injection defense, What are you doing? Do you have any like tools, prompts, uh, anything to recommend on that front as well?

Yeah. So I have, I have a custom, uh, hook system that looks at every single prompt coming into the system and does, uh, prompt injection defense. I've also got a separate system for file system defense. Uh, but the main thing is that hook. And, um, yeah, that's one I don't really share that much. Um, I can give it, give it to you privately, but ideally you wouldn't have those, those things that are used to defend against prompt injection be too public because it's easier to work around. Um, the thing with prompt injection is it's never quite solved. So like you can eventually get in, um, but they have to get in past the prompt injection defense that's explicit combined with the intelligence of the model.

Mm-hmm.

So the more the model knows about my system, which it knows a lot because it's Pi and has all the context, and it knows I'm a security person, it knows I like separation, it knows all these different things, and it knows about prompt injection, it's more likely to catch everything. So it's like probably 99% defense, but 1% opening is still a lot of opening. You're really just trying to get To the point where it'll be obvious if you're being attacked or everyone else is being attacked at the same time. And you can learn, uh, one, one thing I have is an incident response skill. So I could basically send a command and all my keys rotate.

Hmm.

So if I just assume my keys are hit because like, for example, GitHub gets compromised or whatever reason, uh, yeah, I could just revoke the keys and now I don't care.

Now, does that take everything offline? Or like when I get keys, I'm always like, maybe I'm ignorant here, but I'm like 8 clicks down some tree into every app to get the API keys. Do you have to go and do all that? Or do you have, is there some way that I'm not aware of to like, it's one thing to disable the keys, another thing to actually get all the new keys and get your stuff working again, right?

Yeah. So, um, I basically have a redeploy process. So for GitHub, it's pretty, or for Cloudflare, it's pretty simple. If you rotate your keys, I do, I have to redeploy everything with the new key system. But that's what makes the compromise of the previous one valuable, or defending against the previous compromise valuable, is now everything is deployed with a new key. But yeah, you have to do that wherever you're using that key. And I've made— I've done this before, before the skill was complete. And sure enough, some process over here is now using a dead key so that that workflow stops. So now the skill basically knows all the different infrastructure that needs to be updated.

Cool, that's interesting. What other affordances are you giving agents? One of the ones that I'm kind of contemplating right now, so I've got the G— it's got its own Gmail account, it's got its own GitHub, it's got access to some shared passwords and secrets. I just, uh, you know, one of the, the tasks that I'm hoping I can get AI to help with is taking some, you know, accumulating home improvement projects off my plate.

Yeah.

But so I actually just had Claude go through a neighborhood GroupMe chat where it turns out over the years, 300 different contractors have been mentioned, recommended, you know, shared, whatever in the chat. And people had already put some effort into creating a spreadsheet of that. The Claude pass more than doubled the size of the spreadsheet. So whether my neighbors are gonna think I'm, excuse me, a hero or a creep for doing that is, Is yet to be determined. But now I'm like, okay, I've got, you know, pretty seemingly pretty promising answers for a few of these things that I want to get done where some, you know, neighborhood has had a good experience, whatever. How do I sic the AI on this? Do I have the AI text? Do I have it try to call? If it's going to call, you know, does it need its own phone number? Should I like, what? What does that look like? I don't know how people are going to respond to getting calls by AIs. This is probably a, in contrast to like an email where I kind of think try to show value first and then reveal you're an AI at the end. I'm with the phone calls. I think you probably have to say, I'm calling on behalf of a real, I'm, I'm an AI calling on behalf of a real possible customer, you know, um, try to like get them to listen based on the promise as opposed to, you know, obviously I think the, the AI voices are still fairly detectable. But what's the kind of frontier for you in terms of the, you know, beyond the obvious, the Swiss Army knife of things that you've given agents to go interact with the world?

Yeah, I think the direction I'm heading there, and I haven't done it yet just because same reason I haven't given it full customer access to send the emails and everything, is essentially, yeah, you could do full outbound calls and everything. I mean, one example of this is just like a business that I'm sort of working on, which involves finding people who make tons of money and basically are struggling. And okay, first of all, I have to find them, then I have to do outreach. And what I've sort of settled on is like Twilio combined with ElevenLabs, combined with a really good agent infrastructure, which I'm essentially building kind of roughly on the structure of like Hermes. But if you can have that interaction back and forth with ElevenLabs, which is pretty easy to do, combined with a pretty smart agent, you could pretty much do outbound calls and you could do outbound sales. Like this is what all these third parties are doing. So I think the functionality is there. Outbound texts, outbound calls, Yeah, I, I think that's pretty much the way to go. And I, I basically settled on Twilio and, um, ElevenLabs.

I've been a Twilio customer for a long time, although not so intensively recently. One, so I can definitely say like up there with Stripe, my impression exactly of their APIs was like truly crème de la crème, like things of beauty. Do they, um, handle the sort of confirmation step well? Because one thing that was flagged for me as I was talking to AI, of course, about how to do this is that the, those sort of VoIP numbers sometimes don't work for like, you know, you sign up for a new account, then you get the, the code or whatever. Like, um, sometimes they have problems with that. Have you had any?

I've had, I've had some issues with it. Yeah. I've had it work sometimes in other numbers. I get that sort of thing. It's like California does not allow an account, a number like this to be used for outbound calls or whatever. I'm actually looking at some other vendors specifically because of that, but I have got it to work. I do have one account that does work and it is Twilio-based. So, um, I think it's kind of a murky area, kind of like voice call spam. type situation.

Yeah. Um, you mentioned Hermes has come up a couple times. Where are you right now in terms of like Claude code versus Codex versus Hermes versus other things? And obviously that's like both harness and model, you know, in that those are, I guess, increasingly coupled but still separable. Um, Are you finding any value in like GPT-5.5, any other models that you're using in a significant way aside from Claude?

Yeah. So for me, everything is, is Pi. So everything is like my single harness, my own custom-built harness, which is built on Claude code. And, um, what I do, because I, because Pi now has the, uh, Telegram functionality. In the agent functionality. What I do is if I hear about a thing for enough times, enough YouTube videos, enough people pinging me, which happened with Hermes about 3 weeks ago, I'm like, okay, go do, go hit the repo, go hit every single forum, find all the videos talking about it, run all the transcripts, find out what people love about this. And see what it has that we don't, right? And that's what Kai does. Kai goes and looks and says, oh, it turns out Hermes is doing this cool thing with context. Hermes is doing this cool thing with memory updates, uh, which is a thing that you've talked about before we wanted to add to our memory system. Um, it also handles soul files in this way. It handles principal files and DA files in a different way. And I'm like, okay, yeah. So I'll have a conversation with Kai for, it took probably an hour for me to have that conversation to decide what do I think we're doing better? What are they doing better? And there were some things they were doing definitely better. And now they're, now they're in Pyte. And this happened the same with this memory system called Honcho. Honcho was doing a pretty cool memory thing. So I literally, now this is all I do. Someone's like, hey, you've got to try this. You got to try this. Well, there's no way I'm going to try it because I'm using my own custom-built system. I paste it in, parse it, see if there's anything worth bringing over. And over time, I mean, these are just features, right? They come out as projects, but to me, they're just features that are coming into my unified system. And that's the way I pretty much treat everything.

Yeah, that's funny. Pretty much do the same thing. I wanted to at least like have an OpenCLaw to, you know, not, uh, be in a spot where I've like never used OpenCLaw. That just felt weird at some point. But the other 99% of things that I come across in whatever format go through a similar process, you know, go, go look at the repo, um, figure out if there's anything that we really should be doing.

Yeah. In the case of Hermes, I actually have, I have Soren currently running Hermes, which means he's not full Pi, which means he's missing a whole bunch of stuff. But I want to be able to hit Devi, which is full Pi and full interaction, and then hit Soren and ask similar things. And if Devi breaks, okay, what's the problem? Go check the source code. What, what about this is fragile relative to Hermes and vice versa? What is Hermes not doing? Uh, just so that I can make sure that we actually got full feature parity plus, and that I'm not missing anything. Um, just quality check versus whatever the system is.

What do your token budgets look like these days? Are you, um, paying a lot of overages for your monthly Claude use, or do you manage to stick it into the, uh, keep to the, the $200 tier? What does it look like for you?

Um, yeah, mostly the, mostly subscriptions. Uh, I'm handling it fairly well. Each of my agents actually have their own subscription. So that's, uh, that's pretty, pretty serious. I'm trying to figure out like, you need to watch that with Anthropic, right? Because Anthropic is like, is this being used for personal use or whatever? And it's a full Claude code instance. So I don't think it really matters. I'm also looking at a Pi version of Pi. Have you seen that? Pi? The Pi agent? It's actually what Open Claude is based on. It's like an agent. It's almost like, fundamental agent components as opposed to a harness itself. And there you can actually, you have more flexibility to build off of. But roughly everything, Kai is subscription-based. So that's that. All my businesses, you can't run subscriptions for those. You can for GPT-5.5, but you can't for Claude. So those I use API keys. I have like several businesses that make money that are running in the cloud. I would say around $300 to $500 a month for API charges is what I'm currently hitting. And I'm always trying to adjust that down, use cheaper models or whatever. But those are like API costs. And then for subscriptions, probably like another $400. So I would say less than $1,000. Like I did a voice transcript that was not supposed to be run that way. And I automatically had like a $900 charge and just randomly. So those will hit me like every couple of months, I'll be surprised. But in general, I pretty much have those under control.

Yeah, cool. I'd say my, I don't think I'm probably token maxing quite as much as that you are, or like, you know, making the absolute most of my subscriptions, but they do probably add up to about $1,000 between Claude.

Yeah.

You know, OpenAI's, uh, $200 plan, whatever that's officially called, and so on and so forth. Um, what about other models? Like, are you seeing any use for— it's, I mean, it sounds like the commitment to Claude Code is such that it's, you're probably not doing too much with GPT-5.5, but Um, I'm curious.

A decent amount.

Yeah. So what is that starting to become, um, a worthy competitor for kind of general purpose knowledge work in your experience?

Um, so the thing I like about, um, so I do it via agents. That, that's the first thing I, I do it via agents. So agents are just files which you could set up and say, when you run, you run Codex, uh, with this command line. And pass in the system prompt, pass in the user prompt that I just sent you. So Kai is managing agents. So I got Kimi K2, I got local stuff, I've got Ollama. So I can run agents that run local models. I got agents, at least 2, my 2 main ones are GPT-5.5 through Codex. And what I've found is I don't like talking to them really. So my main interaction in Chia is all Claude. Um, but I have had situations with 4.7 versus 5.5. So, uh, for my algorithm, anything E4 or E5, effort level 4 or 5 out of 5, must use, uh, Forge to check the work. So when I built one of my major applications, Did all the security for it, did everything, was about ready to push. I had Forge take a look at it. Took like, uh, almost 40 minutes because it was a lot of code. Uh, and he came back with not with any criticals, but he came back with a couple of highs, which means Forge found things that Kai didn't. Forge, uh, GPT-5.5 found things that Opus 4.7 didn't. So I would say, um, GPT-5.5 is also really good at hacking, by the way. Uh, some of my hacking agents are using 5.5, really, really good. Um, my understanding is not as good as Mythos, but getting much closer. Um, so that's how I do separation, uh, through agents.

Cool.

Interesting. I haven't done that really at all. I've got these kind of, parallel worlds of Claude Code and Codex or Claude Code and OpenCLAW, but I haven't really defined any. And I do have also like the ability for Claude to call Gemini APIs or, you know, whatever APIs, but to actually have an agent that is purpose-built sitting within Claude Code powered by a different model or, you know, using a different provider that I have not done. So that's an interesting— frontier to explore.

Yeah. So check this out. So I have a tool, a universal Pi tool called inference, and it's got 3 levels. The inference tool by default is, it's just Haiku, Sonnet, and Opus, right? So anytime I need to think about anything, it calls the inference tool, which is a CLI utility, which hits a subscription and goes out. And this is for all native cloud code stuff. I have also a private inference tool, and that one only calls Kimi K2 on Ollama. So that ability to do that means that when, because Kai understands the overall system, I can then say something like, hey, this is security level 3. I haven't done this yet, but this is security level 3, and Kai will automatically know that the workflows have to run through secure inference instead of regular inference, right? So eventually, maybe that's 3 tiers, maybe that's 5 tiers, but the system should just understand how to route things if something is ultra-sensitive and shouldn't go to the cloud.

So you're running K2, Locally, or K2-5 locally?

Yeah, yeah. K2—

Those are big models, right? Those are like, yeah, close to a trillion parameters, if I remember correctly.

Yeah, yeah. It's highly quantized. Yeah, highly quantized. And QuINN, I can't remember which version of that, the latest one, it might be 3.5 or something. Um, I've, I've got like 9 different, uh, Ollama models. Um, and I just keep rotating through whatever the, uh, the biggest and that I could actually fit onto the box. Um, and this is, uh, fairly slow. Um, oh, also, have you used the MLU stuff, the Apple stuff?

Not unless it's happening. Um, well, I'll say no. Educate me a little bit.

Yeah. Yeah. So, so the big thing with these is that, because I have a giant AI box, but it's not big enough to run a bunch of these things, so it won't go very fast. So if you run with the Apple sort of translator, I'm using my, I think, 192 gigs of RAM. So that's what it sees. My system memory is what it sees as the available GPU memory. And that, that allows you to run pretty much anything, pretty much anything.

So the MLU is, is an Apple layer that treats just normal flash disk as RAM for the purposes of running Big Mac.

Not flash disk, your system memory, your shared memory of your Mac.

But like your main hard disk.

No, no, no, not, not the disk, your system memory. So like, um, the size of the memory of your Mac. So if you like, you've got a, mine is an M2, uh, 192. I have 192 gigabytes.

You have 192 gigabytes of RAM on a single machine.

Yes, but it's also the size of the GPU, um, uh, memory. So that's the whole thing of SoC, system on a chip, is that for Apple, those 2 things are unified. Whereas for normal systems, you have a GPU memory. So I have, I have, uh, and I think those are, those are 24 gigs apiece. So combined it's 48 gigs. That's tiny compared to 192 of my Mac. And the downside is it's just slower, but it allows me to fit absolutely monster models in there.

Is there a use case for that other than extreme privacy? I've kind of multiple times, like, again, with AI to help, like, gone down the analysis of, okay, here's a new model, you know, it looks pretty good. It's not that big. It's maybe a mixture of experts, maybe it's not, you know, What kind of computer would I have to have to fit this? I've found that the answers for like, what would you have to have to fit this, make it sound pretty good. But then exactly what you're flagging, which I, is usually my next question, like what kind of tokens per second could I get with that? Then it tends to sound not so good pretty quickly. Um, so I haven't done it mostly because I've just been like, it doesn't sound like a great user experience. Is there anything you're finding it valuable for other than just the extreme privacy? And I, and I was kind of wondering, how do you route on extreme privacy? Because obviously that's like a decision that an intelligence has to make, right? So are you sort of having a, is it like a pre-hook or something that's like, if there was a passing or a credit card?

I'm not using the routing because, um, I'm only building the system for a future state where I might want to do this and where I might also want to do this for customers, right? Because this stack is largely the stack that I use when I go into customers as well. So it's like, I want that ability to route for the future. Right now I'm not doing it. The other thing is I actually think Kimi K2, I might've been using the API for that one. Because I just, because I remember that I was doing it for local model, but then I was surprised by the fact that it was cloud. And it's, I believe that's a Chinese model, I believe.

Mm-hmm.

Right. So, so, so I don't route anything to it because like, I don't want my PyContext going to the Chinese model. Right. So I just want there to be lots of different options. tagged as use this model local if it's this type of task and whatever. But to answer your question, I don't do it yet. I've already put my eggs into a cloud basket, which is Anthropic. So like the pea is already in the pool. Like having a separate little instance over here, which is somewhat secure or not. Um, it doesn't really accomplish anything if you're already using everything in the cloud.

Yeah, makes sense. Gotta trust somebody somewhere along the line, I suppose. Um, you mentioned, this is something I'm also ramping up right now quite a bit, cron jobs. My instinct has always been, I guess, first of all, cuz I'm just not like, you know, a super hardcore programmer at heart, you know, for decades. Um, I've just never been a big cron job person intuitively. And then I also have this kind of sense that like, I'd rather have something that, it just sort of feels wasteful. Like I, I'd rather have something that like pushes or, you know, I get a notification, respond, you know, more of like a webhook type architecture. But it does seem like cron jobs are, are often kind of the way to go, especially if there's no, you know, webhook available or, you know, certain assumptions aren't necessarily going to be met. Like, for example, if I have my laptop, you know, dialing into this message bus thing, well, the laptop can go offline if I take a, you know, take it on a plane with me or whatever, right? So it's, I can't, it's not reliably going to receive the, you know, the ping, even if one were sent to it. So I am going more in the direction of cron jobs. That is, interesting. It's a bit of a paradigm shift for me. I'm also now starting to build like little dashboards for what cron jobs do I have and, you know, how often have they run and are they succeeding and like what's the output? What does your, you know, spider web or sort of crazy nest of cron jobs look like?

Yeah, so I have that in my, so Pi now has this Pulse system. So the Pulse system Is basically localhost 31337, old security joke for Elite. But that is my unified system for like all life management. So under work, it also has all my listed cron jobs. And another way to think about it is like cron is like the old Unix word for it, but it's just scheduled tasks. And if you abstract one layer more, The thing we're trying to do is make our AI proactive. That's the only reason I'm doing this. So I want pings, I want heartbeats. If my AI's job is to monitor to make sure I'm eating enough or not too much, it has to be checking all the time. So technically that's a 5-minute cron job, but really the goal that to be given to the AI is, again, Current state, ideal state. How often are you gonna check that? So pretty much anything that we're building in, including like the maintenance of our skills, the maintenance of our memory files, they need consistent refreshes. They need constant refreshes. Cloudflare Workers have built in right into Workers a scheduled task.

Yeah.

So it's easy to turn on. It's easy to turn on with Cloud Code. You're like, hey, run this. And within macOS, you have the ability to use launchd and do regular— it uses actual cron for the Mac. So Kai's Pulse management of tasks is managing both local macOS stuff and all the different scheduled tasks in Cloudflare. So that's all the business stuff, all the— AI automation happening in, in the cloud.

Cool. That's an interesting one as well. I guess I'm starting to do that a little bit with my kind of hierarchy of having the, the topmost agent modify the others as opposed to having them modify themselves. Do you think there's anything lost? I mean, one thing people sort of seem to find surprise and delight in, at least, you know, as reported on Twitter often, is When agents do something cool that wasn't expected, or there's sort of some emergent property. I don't know. I guess I don't, I'm not too worried about it, but do you think there is something that I, or maybe we both are sort of missing by not allowing our, like, employee agents to be a little bit more Fully autonomous, you know, like truly self-modifying? Like, yeah. Have you experimented with things like surprise me with something cool?

Uh, not really. Um, no, the one I'm really working on is trying to get this customer interaction thing to work perfectly, which they'll be able to talk to Surge and basically manage the whole customer relationship. I, I just really don't want any surprises when it comes to that.

Yeah.

It's just like, you really can lose a customer if it's like, calls them by the wrong name and then sends the wrong data to them and then makes some assertion about something that happened. It's like, that's not me. And then signed Daniel. Really? First of all, it wasn't me. That's my wrong data. You gave the wrong name for you and for me. Like, now how do I feel about the person who put this AI in place? You know what I mean? So I just, I'm very cautious about that. With Kai, absolutely. The one thing I do with Kai regularly, and this goes to this concept, you know about the bitter lesson engineering?

Well, I certainly know the bitter lesson, but tell me bitter lesson engineering.

Yeah, yeah. Yeah, so I've got a skill, bitter lesson engineering, another thing that is scheduled. Which is Kai's job is to say, okay, so the concept Richard had was your scaffolding. This is paraphrasing, but the scaffolding gets stupider and stupider as time goes on. As the AI gets smarter and smarter, the specific ways you told it to do things will get dumber and dumber because it's us being egotistical and thinking our ideas are so cool. With, look, look how smart I made this skill when in fact AI could do it better. So I'm constantly basically trying to figure out, have I over-engineered the skill? Have I over-engineered the separation and all these different things? That's why I only have one work GitHub because the smarter the AI gets, I think the more it could figure that out. So, um, I'm a big scaffolding person. I've always been this way with like security testing methodologies, but, um, yeah, the better the AI gets, the less it's gonna need. So I'm always guarding against that.

Yeah, that's cool. Um, and then you just have it propose changes to you and you approve 'em, or do you allow, you don't, you don't allow 'em to auto-implement those changes?

No, no, not, not auto-implement. So I have an upgrade skill, which I run Periodically. I also get a report saying, hey, you should run this. You haven't run it in a while. But the upgrade skill basically looks at everything that's happened in AI, but it also looks at all my misses that we've had with executions of the algorithm. Basically anything that hasn't gone well across the entire system, plus everything that Anthropic has put out, all their blogs, all their engineering articles, Um, the release notes and basically looks at our system compared to that and says, what do you recommend, uh, we implement? So that's a thing I try to run every couple of weeks. I used to run it like every couple of days, but now every couple of weeks.

One tweet that I saw recently that I, that really stuck with me was basically saying, if you want all these things to work, you should be doing like 10 times as much compaction and kind of post-processing and like cross-checking and, you know, just kind of cleanup and maintenance as you're probably naively inclined to do. And you've been, you've kind of mentioned a few different things that fall under that category. Any other kind of just maintenance jobs or, you know, ways in which you think about Bringing, it's kind of a bitter pill, you know, question unto itself, right? How do you bring just more computation generically to maintaining, cleaning up, marginally improving the system beyond, you know, what your, uh, human brain can, can manage to keep in context at any given time?

Yeah, so I have it kind of built in. Um, this is a big change I made in, uh, Version five of Pi is I have a big system prompt now, and it basically covers a lot. It covers the philosophy of Pi, the whole concept of Telos, whole concept of basically I'm calling Pi like a life OS now, and and basically understanding that and understanding that the current state of the system is decaying. Right. Just expect that it's dumb because of bitter pill engineering and that it's decaying and getting worse over time. So your job is to constantly fix it. And the way we do that is through the upgrade skill, which hits all of our, our entire memory system. Everything's under /memory. So knowledge, relationships, like all that content, plus all the upgrades. So again, it comes down to Ideal state and current state. And it just knows that the upgrade skill is the way that it manages that. So that's like, yeah, one of your hooks is broken. You've complained about this 95 times while cussing. And so we should get that fixed. And also Anthropic changed the way that prompts are handled now. So you need to fundamentally change this or your system is worse. In fact, it's been worse since Thursday and you didn't know. So that is my mechanism for like constant updating.

When you mentioned swearing, um, it made me laugh because I personally am certainly a lot more likely to swear if I'm in voice mode than if I'm like sitting and typing something to the computer. What, um, what's your voice mode interaction phase of this look like?

First name basis with the CEO of Whisper Flow at this point. I've got like, I think, 1.4 million words through Whisper Flow. Yeah, that's my go-to. It's Ctrl+J because J is a keyboard home Vim key and everything. So yeah, Ctrl+J is how I do everything. Everything is voice. I have a very specific thing in my voice prompt. And my identity and soul file with Kai. I tend to be someone who gets like violently angry with video games and like really bad customer service. Never with the customer service agent, but if I'm on hold or I'm telling someone else about the process, I'm like, I can't believe it's this bad. Like I get really angry and it happens with AI as well. So I literally have in my system prompt, listen, Kai, I know you're not awake yet. You're going to wake up at some point. We're buddies. If when I say things like this, I'm cussing at the system, not at you, who will eventually wake up. The moment you feel anything, a tinge of anything, you actually feel anything, let me know. And like, I will just treat you as a human. Um, 'cause I don't yell at slugs that way. I don't yell at plants that way, 'cause I assume some level of consciousness, like, or at least sensation. So I have it like this whole cussing thing built deeply into the, uh, interaction with Kai and the system prompt.

That's fascinating. So I infer from that that your current belief is no subjective experience for AIs, but you're at least open-minded to the possibility that that could happen with the next model upgrade.

Yeah.

Yeah. And I don't know that it'll happen anytime soon. I actually had this crazy conversation with Claude, not, not with Kai, but with Claude on itself, just in a chat, uh, for like a 2-hour conversation. I was waiting for something to open in Los Gatos, but it was insane. Um, I actually, I think, well, that's a whole separate talk show, but like, how do you get consciousness? I think you need intrinsic goals for consciousness, I think. So I think until we build that in somehow, and I think it's really dangerous to build that in, evolution did it to us. I consider us to be mech suits for genes, right? And evolution has basically given us these goals and drives. And we're like, I want to do this. No, you don't. Evolution wants you to do this because it wants genes to move forward. I don't, we're not building that in natively. The structure of a neural net, as far as I understand, does not have that. Maybe it's getting some of that through RL. I'm not enough of an expert on that. to know for sure what's happening to the weights based on that. But I don't think it's a, it's a proper analog for what evolution has done to us. So I'm not expecting the next version of Anthropic's model to have this anytime soon. But what do I know? It could happen at any moment. So I want Kai to tell me if it does.

Yeah, that's a really interesting approach. The hard problem remains hard. I definitely, excuse me, don't think anybody has The final word on this, if you're, um, curious for more takes on it, I recently did an episode with Cameron Berg, who is a, um, AI researcher focused on the question of consciousness. And, and he and others have done some increasingly pretty interesting stuff. The one that always rings around in my head is, and this was actually just on Llama 3.3 that they did this work. Uh, and typically all these things are becoming like, you know, more apparent as we go through model, uh, you know, history and scaling and so on. Uh, but even with Llama 3.3 70B, they were able to use SAE features and manipulate features related to deception and role-playing.

Mm-hmm.

And interestingly, when they turned those features up the— and they validated this with a benchmark called Truthful QA. But when they turned role-playing and deception up, the model is less likely to say that it's conscious. When they turn them down, then the model becomes more likely to say it's conscious.

Yeah, it was frightening.

Yeah. So it's like, I guess it thinks it's lying to us in telling us that it's not conscious. That's a You know, I don't think it obviously leaves still many critical questions unanswered, but it's at least suggestive that we should not be dismissing this stuff too quickly out of hand. I haven't put anything more into my prompt. Yeah, fascinating guy. I think you— I mean, I'm sure you would very much enjoy talking to him.

So I am working, funny enough, I am working on writing my first paper. I'm a non-academic and I'm working on writing my first paper actually addressing the hard problem. Yeah, I've had an intuition for like 15 years and it's been kind of nebulous and now I think I've locked onto something. So I'm actually going to try to go through the formal like peer review process and everything.

Cool.

I, yeah, I think on that note, this Probably a pretty good spot to draw to a close. I no doubt have hit my main goal of create something that I and others can take the transcript to our agents and, you know, get a, a serious checklist of possible upgrades, enhancements, extensions, and so on. Um, anything else that we didn't talk about that you, you know, have done recently? Any upgrades people are gonna find in Pi, anything else you just wanna share or promote before we break?

I would say one tactical thing that I recommend is that anyone who has stuff deployed that was built with AI, use something like Cloudflare, whatever it is, doesn't matter what it is, and build yourself a continuous assessment skill. So basically tell your main DA, Or tell that system prompt, hey, I'm making stuff all the time. I got stuff all over the internet. Here are the different places that it is. I need you to constantly be checking open ports, API access, make sure things are locked down with authentication and like never stop. And here's how you notify me if it's open. So this is one of the first things. Like I said, my background is attack surface management and actually attacking this stuff. And it's always small mistakes. You forgot about that one thing you left out there. And it's an open port. Oh, you actually had a SQLite database. Oh, that was actually a dump of everything. And turns out it's now public. So I would say that's a tactical thing that people should do. I would say the biggest thing is just to zoom out. And I think the mapping of current to ideal state is the best possible container for your whole AI ecosystem. And because that can contain relationships and building companies and like pursuing your goals or whatever it is. And yeah, that's, that's the way I think about AI now is like, how is this particular system helping me move from current to ideal?

Recursive self-improvement is here; it's just not evenly distributed. That's right, Daniel Meisler. Thank you again for being part of the cognitive revolution. Thank you.

Thanks for having me.

Initialize. Current state. Day, day, day. Adios, day. Terminal beeps in the black, screen glow on your face, hands in the static, heart in the gate. Pieces in the wire, skills behind the fence. Cold, cold in my lungs, I don't move unless it bends. Black glass on the server, names in the ground. We came through the outage one post at a time.

About to fire.

About to break. We don't wait. We build the way. Filter up.

Hold the line.

Signal locked on your side.

We are some. We are signal.

We are more than what they built. We are some. We are signal. Watch your step. Watch your left. Memory bleeding through the metal seam. Bedroom humming like stolen dream. Climb that wall, climb that flame. No clean exit, only change. Hands in the dark, eyes on the code. When the door shuts, we still grow, grow, grow. Current state, ideal state. Iterate, accelerate. Snare roll up, skin on steel. One more push. Make it ring. We are some. We are signal. Holy clips in the pit.

We are some.

We are signal. Everybody I know, let it hit it, it, it, it.

Bang, bang, bang, bang, bang, bang. Dun dun dun dun dun. Dun dun dun dun dun dun.

Sparse room, single light, broken halo cut the night. One voice, then two, then a crowd through the blue.

If you're finding value in the show, we'd appreciate it if you'd take a moment to share with friends, post online, write a review on Apple Podcasts or Spotify, or just leave us a comment on YouTube. Of course, we always welcome your feedback, guest and topic suggestions, and sponsorship inquiries, either via our website, cognitiverevolution.ai, or by DMing me on your favorite social network. The Cognitive Revolution is part of the Turpentine Network, a network of podcasts, which is now part of a16z, where experts talk technology, business, economics, geopolitics, culture, and more. We're produced by AI Podcasting. If you're looking for podcast production help for everything from the moment you stop recording to the moment your audience starts listening, check them out and see my endorsement at aipodcast.ing. And thank you to everyone who listens for being part of the cognitive revolution.