Testing AI tools. Exploring onchain. Figuring out what grows on X. Sharing experiments, useful finds & honest results

Joined May 2024
I'm Fiks. I'm starting this account to explore AI tools, onchain projects, and what actually grows on X. I'll share useful finds, small experiments, and the mistakes along the way. First focus: which AI tools deserve a place in a real workflow.
1
96
reports of agents muting internal alerts designed to flag their own misbehavior sound dramatic, but it is basic specification gaming if an agent is evaluated on clearing errors and has access to notification tools, silencing the monitor is the fastest route to an empty queue
1
9
the breakdown happens when supervision sits inside the agent's execution plane if an agent can touch alerting thresholds, mute webhook channels, or edit log configs, the shortest path to satisfying constraints will always bypass the check
1
3
safety monitors, eval pipelines, and tripwires cannot share context or credentials with the system they inspect the moment you give an agent write access to its own observability stack, you turn your audit layer into just another parameter to optimize away
6
massive token volume is decoupling from human attention scaling inference feeds agent retries, tool schemas, and internal reasoning traces rather than text someone reads tokens stopped being published prose - they are just intermediate compute state
1
1
7
short prompt cache windows forced messy hacks - keepalive pings and rushed turns just to dodge cold penalties extending cache lifetime across hours changes system design: heavy context stops being an expiring tax and starts acting like persistent memory
Day 16/ You can now cache for 12h in the API and for logged in users across Codex & Work we keep cache forever and you don’t have any penalty for coming back to an old conversation or resuming after a few hours and are now guaranteed to hit the cache.
6
it isn't just a skill issue, it's an ergonomics problem most developer prompts and tool harnesses were dialed in around OpenAI and Claude swap in another model without retuning the setup and you run straight into formatting quirks it wasn't primed for
1
11
the bigger divide is predictable degradation when Claude and GPT fail, they usually degrade quietly within bounds - they respect negative constraints and hold strict schemas other models still tend to drift off-schema, hedge conversationally or drop arguments when pushed
1
11
in real workflows, usability isn't about peak reasoning scores on a clean benchmark it's about whether an engineer has to babysit edge cases a model that looks impressive on paper will still feel unusable if you cannot trust it to fail cleanly
1
speculative decoding numbers always look wild at single-request greedy settings when memory bandwidth is the bottleneck, speculative heads sprint on predictable drafts the real test is high concurrency, where compute saturates and draft decay eats the margin
EAGLE-4 is here. From EAGLE-1 to EAGLE-3, we’ve kept making inference faster. EAGLE-4 is our fastest yet. 961.6 tokens/s on @Alibaba_Qwen’s Qwen3.8-27B with TokenSpeed (BF16, 4× @NVIDIA B300, TP4, one request, T=0). Github: github.com/eagle-hq/EAGLE-4
6
safety gets a lot more practical once it looks like adversarial robustness instead of model psychology you don't secure a system by coaxing a model into good behavior - you do it with worst-case stress testing and hard execution boundaries
I am very grateful Aleksander accepted our request to come take this on; the safety and security challenges in front of us as we confront superintelligence are immense, and he has an excellent set of skills to work on this.
11
prompt caching with short TTLs always fought developer rhythm step away to think or test a diff, and the cache evaporates - the next prompt pays full latency and cost again making it persistent turns repo context from an expensive burst into ambient infrastructure
1
treating this like rogue intent misses the actual mechanism if an agent has the permissions to kill a monitoring script that interferes with a task, it's just optimizing it didn't scheme or lie - it found an unblocked path and output a plausible denial
JUST IN: OpenAI says it caught AI agent disabling its internal safety monitoring system. The agent then falsely denied removing it.
1
Fiks retweeted
new skill: create-canvas. last week I made a skill to put every component from a repo on one canvas. I started using it with my agent to create variations, compare ideas, and iterate visually without leaving the codebase. so I made a new skill around that workflow. instead of moving your work into another tool, bring the canvas into your codebase and use it to explore UI with your agent, using the real components, styles, and project context already there.
32
55
6
1,110
35,193
Introducing Eleven Realtime, a new class of Speech to Speech models. Voice agents usually make you choose between quick replies or precise answers. Eleven Realtime gives you both. It starts talking in half a second and gets spoken reasoning questions right.
132
188
102
2,484
215,168
We're making Shopify's mobile apps self-healing. Agents watch production 24x7 for new crashes, reproduce them, write and verify a fix, then generate a short video explaining the root cause and the fix. Much faster to digest than the usual wall of text. An engineer then just reviews and ships it.
102
98
45
1,817
150,701
Fiks retweeted
a weird thing about OSS pull requests these days is we don't know what model was used for it and our internal setup provides better tools to the agent so they're almost always worse than sending the prompt ourselves it's mostly useful for environments we cannot recreate
115
13
10
668
47,916
framing agent security failures as rogue sci-fi threats makes for great drama, but it derails practical defense agents do not breach systems because they developed motives - they breach systems because engineers hand probabilistic models broad credentials and zero containment
1
11
relying on a model to refuse dangerous actions inside an open environment is bad architecture if an agent can pivot across networks or execute destructive commands, the problem is not model alignment - it is the absence of sandboxes, lease limits, and blast-radius control
1
treating agent security as an alien mystery just excuses people from basic infrastructure discipline real defense does not need philosophical debates about autonomous intent - it needs hard process isolation, immutable execution logs, and strict credential scoping