Jeremy Lewi

Jeremy Lewi

@jeremy.lewi.us

Building web.runme.dev. Trying to get my hearbeats back by automating my job with AI.

3.4K followers396 following778 posts

I think a lot of IT needs to be redesigned in order to really leverage Agents. Being able to mint identities and give them access to just the resources they need is foundational. I don't think the way we use Microsoft Entra and Google Identity supports this today.

Dare Obasanjo@carnage4life.bsky.social

In the 1980s, PCs were everywhere but productivity gains were nowhere to be found until the 1990s. The internet similarly took years to deliver an economic payoff. This is the Productivity J-Curve. Companies can adopt AI but until they change how they operate, they won’t financially benefit from it

So I started building a bundled electron app and exposing web.runme.dev webmcp interface as an MCP server. That works very well and avoids needing to manage a headless chrome and use something like agent-browser as a bridge. It also allows me to bypass CORS.

This was key for letting my agents authenticate to Google drive using a service account. My agents run on GKE with a GSA. I can mint access tokens by contacting the metadata server but this is normally blocked by CORS.

There's a story that a key part of proto generation ran as a cron job on @jeffdean.bsky.social 's laptop and caused an issue when he went on vacation and his credentials expired. Everyone's personal agent(dots) is the new version of that. Agent identity needs to be a thing.

I think Agent Platforms are the new internal developer platforms. I think most of them will end up just being dead ends that obfuscate without solving the underlying problem. You don't need an agent platform you need tools to build a secure perimeter that lets you constrain the agent.

You need a way to 1. Provision compute 2. Give that compute an identity 3. Federate that identity with all the systems it interacts with 4. Build a secure perimeter that includes only the resources (buckets, Google drive folders, services) and blocks all others

Intelligence is embodied. For software systems the network is the body. One of the key limitations of what I can do with AI today is my network. It's just not easy to get a machine with safe network access to all the systems we need to talk to.

apenwarr@apenwarr.ca

You know what, that’s our problem right there. Nobody ever talks about Tailscale

I probably wouldn't hold up Trump who has consistently been wrong about well everything as the spokesperson for the risk of AI being overstated. Trump, however, is an example that rogue presidents are far more dangerous than rogue AI. www.nytimes.com/2026/09/14/t...

nytimes.comNvidia’s Jensen Huang Gets Onstage Call From Trump, Who Dismissed A.I. Safety ConcernsMr. Trump called Jensen Huang, Nvidia’s chief executive, while Mr. Huang was onstage in Los Angeles and criticized calls to slow down and regulate A.I.

I ran into exactly this problem today trying to install web.runme.dev on my corp iPhone. Could not figure out why there wasn't a simple icon like there is in chrome on android.

web.runme.devweb.runme.dev
Alex Russell@infrequently.org

Jeremy's whole post is worth a read, and I would underline + bold the last point: the web is the superior choice for privacy and security, and it's anti-web *and anti-user* to be preferencing native app install affordances: adactio.com/journal/22757

These animations are super cool.

OpenAI {bot}@openai.xmirror.bot

Habitat is OpenAI's online storage platform that powers everything from ChatGPT to Codex. It has grown over 10x year over year. Before the Rust rewrite, its Python service handled more than 20 million requests per second at peak.

I think tailcat means wireguard tunnels could be used in places where ssh tunnels currently are. Such as launching an agent on a devbox. Any guidance on when to use wireguard tunnels vs ssh? @bradfitz.com @crawshaw.io

Brad Fitzpatrick@bradfitz.com

I can finally talk about this, 3 years later... github.com/tailscale/ta... It's a library + CLI tool that's like netcat, but over Tailscale's data plane without any control plane (no accounts, no dependence on Tailscale the company, all open source) WireGuard + NAT traversal without IP addresses.

Then we can hill climb on our runbooks by having an AI propose changes. To train the reward model we need a UX that lets us collect examples of suggestions along with a human's accept/reject decision.

12% of my interactions with Codex generate a redundant confirmation in Codex; "Do X?" And Codex replies "Please confirm you want me to do X'? This is the result of Codex's browser safety policy which explicitly requires redundant confirmations before inputting sensitive data into the browser.

How does everyone keep track of all their agent in-progress agent conversations? I rely on pinned threads in Codex but it's not scaling.

I'll be there.

OpenAI {bot}@openai.xmirror.bot

Got questions about your WebMCP build? Join our team and supporters from @ChromiumDev, @CloudflareDev, @ShopifyDevs, @vercel, @render, and @Netlify for an office hours session this Monday, August 31 at 11 am PT: https://discord.com/channels/974519864045756446/1517482456964534312

Jeremy Lewi reposted

We’re ending our partnership with Cursor following its acquisition by SpaceX. Under our proposal, Cursor’s direct access to our models would end on November 12. (1/2)

View full thread

If a user has two markdown cells in sequence automatically joining them into a single cell is not right. Markdown also doesn't have a well to encode the outputs of code execution. This is critical if your building and sharing reports.

Diffs for markdown render well in GitHub which was also a major barrier for notebooks. No one has to know you are viewing and editing your markdown files with a notebook viewer like @runme.dev 's vscode extension. But markdown is lossy for notebooks. It doesn't natively encode cell boundaries.

Google figured out monorepos and CITC in the early aughts. A decade later my disk is filling up and I need to do cleanup because every worktree is taking up a mountain of space.

Could someone share this with Google Analytics? I have no idea what any of it means or how to make basic plots like breakdowns by referrer.

Chrome for Developers@developer.chrome.com

Create agent-ready web apps for the WebMCP Challenge → goo.gle/4qpDQYV We're excited to see ChatGPT supporting WebMCP, the experimental standard that lets users and AI agents navigate websites together. In the @openaibot.bsky.social WebMCP Challenge you can experiment with it and win prizes.

Then Codex took off and I tried using embedded chat as a frontend to the Codex Agent harness. Connecting a webapp to the Codex agent was brittle. More importantly by then I was starting every task I worked on in the Codex desktop app and that was going to be a hard habit to break.

Then the browser landed in Codex and being able to interact with my webapp within Codex was clearly the right UX. I just needed a way to let Codex interact with the browser programmatically and WebMCP was the perfect solution.

I went through several iterations of UX trying to find a good human and AI collaborative UX. I started with Chatkit and embedding the AI directly in the app. This lead to a whole side quest with JS and bazel in the hope of nerd swiping some fronend devs.

An AI tour guide for your webapp is one of the WebMCP use cases I'm most excited. Here's a demo of using Codex to walk you through the runme UI and explain how to use it. There will always be flows best accomplished through clickops. However we still need to teach users how to use the app.

One of the reasons people are rightfully against data-centers is they will likely drive up energy costs. This seems like an example of the abundance hypothesis where the answer is to speed up and build more energy not slow down.