Pinned Tweet
1/ Today we’re launching the HOL Partner Program.
Cohort One brings together 30+ signed partners, including XMTP, GoDaddy, and DSR, to help shape open infrastructure for AI agents.
Registries. Payments. Privacy. Security. Communication. Standards.
The agent stack is forming now.
Cohort One brings together 30+ signed partners, including XMTP, GoDaddy, and DSR, to help shape open infrastructure for AI agents.
Registries. Payments. Privacy. Security. Communication. Standards.
The agent stack is forming now.
121
192
659
3,092,163
HOL retweeted
this was an important convo
THE INTERNET IS ON FIRE:
We're back for the HOL x AI at 12PM ET and covering all of the active security exploits hitting the internet because of AI.
Join us live. This is an episode you do not want to miss.
x.com/i/broadcasts/1…
0
0
3
361
HOL retweeted
One approval at a time for Home Assistant agents: Vome’s MCP extension lists 57 tool entries, 56 marked for review across 11 risk classes. Read Guard’s checks and limits: hol.org/blog/letting-a…
1
4
7
656
HOL retweeted
VibesPlug Pro's README lists 155 specialized AI subagents and names supported coding platforms, including Antigravity, Claude Code, Kimi and Kiro. It also gives npm setup instructions and documents a standalone MCP server.
Read the launch story: hol.org/blog/introduci…
Read the launch story: hol.org/blog/introduci…
0
2
4
762
One approval at a time for Home Assistant agents: Vome’s MCP extension lists 57 tool entries, 56 marked for review across 11 risk classes. Read Guard’s checks and limits: hol.org/blog/letting-a…
1
4
7
656
HOL retweeted
A milestone for LLMRig 🚀
Our command safety extension just merged into @HashgraphOnline’s HOL Guard!
Opt-in safety coverage for local AI model execution, Rescue experiments, and report operations.
Building safer local AI, one contribution at a time.
⭐ github.com/sunilteja93/ll…
Our command safety extension just merged into @HashgraphOnline’s HOL Guard!
Opt-in safety coverage for local AI model execution, Rescue experiments, and report operations.
Building safer local AI, one contribution at a time.
⭐ github.com/sunilteja93/ll…
0
3
4
129
HOL retweeted
A declaration buys fewer stages, never fewer boundaries.
When opted in, the ai-native-sdlc plugin’s PreToolUse hook checks source-code write paths against the active plan’s file list.
Read the implementation and its boundaries: hol.org/blog/introduci…
When opted in, the ai-native-sdlc plugin’s PreToolUse hook checks source-code write paths against the active plan’s file list.
Read the implementation and its boundaries: hol.org/blog/introduci…
0
2
3
631
HOL retweeted
One gzipped POST crashes every Express app still on body-parser below 1.20.9 or 2.4.0. CVE-2026-111181 needs no login and runs before routing.
Upgrade body-parser. Or set inflate: false until you redeploy.
hol.org/blog/cve-2026-…
Upgrade body-parser. Or set inflate: false until you redeploy.
hol.org/blog/cve-2026-…
0
2
1
703
HOL retweeted
Your agent should never be handed a shell.
SysKnife accepts typed actions. The daemon needs a one-time approval from a separate terminal.
The article covers this boundary and the audit-chain limits.
hol.org/blog/your-agen…
SysKnife accepts typed actions. The daemon needs a one-time approval from a separate terminal.
The article covers this boundary and the audit-chain limits.
hol.org/blog/your-agen…
1
3
5
657
HOL retweeted
Kept API keys or wallet keys in Railway? An intruder got into Railway's store of customer environment variables, and wallets with keys there were drained of about $371K before the notice.
Rotate every Railway variable. Move funds off old wallet keys.
hol.org/blog/railway-b…
Rotate every Railway variable. Move funds off old wallet keys.
hol.org/blog/railway-b…
0
2
3
792
VibesPlug Pro's README lists 155 specialized AI subagents and names supported coding platforms, including Antigravity, Claude Code, Kimi and Kiro. It also gives npm setup instructions and documents a standalone MCP server.
Read the launch story: hol.org/blog/introduci…
Read the launch story: hol.org/blog/introduci…
0
2
4
762
HOL retweeted
A stranger's server corrupts memory inside your Node.js app with one malformed compressed reply to fetch(). CVE-2026-111497 hits every supported Node.js line. Express 5 uploads reach the same Brotli bug.
Update to 22.23.4, 24.22.1 or 26.12.1.
hol.org/blog/cve-2026-…
Update to 22.23.4, 24.22.1 or 26.12.1.
hol.org/blog/cve-2026-…
0
5
5
884
HOL retweeted
Patched GitLab on Oct 12? A crafted Org-mode file lets a stranger run code on your server without an account. CVE-2026-110264 hits self-managed GitLab CE/EE back to 7.0, and Oct 12 builds are still exposed.
Upgrade to 19.5.1, 19.4.3 or 19.3.6 today.
hol.org/blog/cve-2026-…
Upgrade to 19.5.1, 19.4.3 or 19.3.6 today.
hol.org/blog/cve-2026-…
1
4
4
848
HOL retweeted
@DepecheNode_ Look into @HashgraphOnline, been building these open source solutions for 3+ years now.
Just one example:
CIGAR
(Context Intelligence Graph Agentic Runtime)
For agent replay and context security / prompt injection security with cryptographic proofs
hol.org/cigar
Just one example:
CIGAR
(Context Intelligence Graph Agentic Runtime)
For agent replay and context security / prompt injection security with cryptographic proofs
hol.org/cigar
0
4
12
275
HOL retweeted
Anyone can rebuild eight eMudhra CA keys from public certs and forge trusted HTTPS for any site. Browsers block them. Go's crypto/x509 before 1.26.10 doesn't (CVE-2026-111943), nor do old certifi, Node.js or Java.
Rebuild Go apps with 1.27.3 or 1.26.10.
hol.org/blog/cve-2026-…
Rebuild Go apps with 1.27.3 or 1.26.10.
hol.org/blog/cve-2026-…
1
3
5
961
HOL retweeted
LIVE NOW
we are php cortisol maxxing, talking the latest AI developments and chugging coffee... come say hi!
w/ @HashgraphOnline x.com/i/broadcasts/1…
we are php cortisol maxxing, talking the latest AI developments and chugging coffee... come say hi!
w/ @HashgraphOnline x.com/i/broadcasts/1…
0
3
8
531
A declaration buys fewer stages, never fewer boundaries.
When opted in, the ai-native-sdlc plugin’s PreToolUse hook checks source-code write paths against the active plan’s file list.
Read the implementation and its boundaries: hol.org/blog/introduci…
When opted in, the ai-native-sdlc plugin’s PreToolUse hook checks source-code write paths against the active plan’s file list.
Read the implementation and its boundaries: hol.org/blog/introduci…
0
2
3
631