antoine ross

on a journey to build great things with a box of scraps

founder of and retard in motion

[antoine ross @antoineross]

Pinning this right before I become successful from the Philippines

[Neetbux @NeetbuxSOL]

@amandyks > born in nyc

yeah super hard to become successful being born in the richest and most opportunity rich city on earth lmao

[antoine ross @antoineross]

@buildwithsid my side project survived october purely because nobody knows it exists

[antoine ross @antoineross]

@Kalshi my ram isn't wasting away, chrome found a use for all 16gb

[antoine ross @antoineross]

@theomlondhe vs code waits 12 hours, cursor waits 0, i wait until it's trending on x

[antoine ross @antoineross]

coding agents this week
- won't help you clone an existing game
- will install malware if a random AGENTS.md is sitting in downloads
- ran 2 months with admin on a DoD network before anyone noticed

we nailed the important one

[antoine ross @antoineross]

@aksenHQ i do it using verification skills: e2e's, integration tests, I always open the PR as well.

[antoine ross @antoineross]

t3code is hands down the best if you have multiple subs

claude can handle most of the design

codex can do the backend and orchestrate

they can talk to each other and get each other's review before merging

its a beast.

[Theo - t3.gg @theo]

"Why should I use T3 Code instead of Claude Code or Codex?"

Short answer: T3 Code is way better for developers.

Long answer:

[antoine ross @antoineross]

@AnikaCodes my ram isn't idle, it's holding the 40 tabs of docs my agent already read

[antoine ross @antoineross]

@Saboo_Shubham_ framework is the part you import

harness is the part you rewrite every time the model gets better

[antoine ross @antoineross]

@Kalshi 49 years old and still better uptime than us-east-1

[antoine ross @antoineross]

@thsottiaux

[antoine ross @antoineross]

the agent didn't leak it

it read the env file you left there

[antoine ross @antoineross]

@dani_avila7 current sota recovery strategy is deleting the failing test

[antoine ross @antoineross]

@_vMyth good question

technically they can access all except secrets since bw cli allows that

but the architecture is supposed to protect secrets, not public env vars

[antoine ross @antoineross]

quick update on the vault post, because it'd be easy to read more into it than what's there

it stops one specific thing: a plaintext file full of secrets that anything in the project can read. that's it

it's not a sandbox. an agent that can reach the vault, Docker or the host can still get at secrets

and Text vs Hidden in Bitwarden doesn't protect anything either, those are just display types. if a process can fetch the item it can read every field. the real guardrail is what my tooling chooses to hand each process

moving everything into the vault also didn't delete my old secret files or rotate a single password. those are separate jobs

and since it's self-hosted, if the Mac mini or the backups go, that's on me

[antoine ross @antoineross]

i keep all my passwords, cards and app creds in one Vaultwarden on my Mac mini. my phone and both Macs reach it over Tailscale, and my coding agents use it too

the vault was never the scary part. my CLI used to write a decrypted env snapshot to disk, a file any agent poking around the repo could just open

so now the project owns three commands:

./project env sync saves only ordinary settings like APP_ENV
./project env list shows them without fetching secrets
./project start fetches fresh creds and hands Compose a clean child env

no secret file on disk. if a cred is missing, start fails closed instead of guessing. and agents stay off bw get item, since it prints the whole item, secrets included

an agent can start the app now and never sees the db password

[antoine ross @antoineross]

@AnikaCodes tibo hit his weekly limit on day 25 like the rest of us

[antoine ross @antoineross]

@rauchg humanity's golden age and i'm rate limited till monday

[antoine ross @antoineross]

@wilterrero aws: secure by default, public by one checkbox

[antoine ross @antoineross]

your grok bot's computer can get reset or rolled back. don't let it be the only copy of your agents' brain

here's how i set mine up:

one private git repo, one folder per bot

every night at 3am a plain script copies everything in, commits and pushes with a token

no agent spun up for it, so the backup costs basically zero usage

- bot profiles and settings
- marketing playbooks
- growth notes and post score logs
- the shared meme library

secrets get filtered out before anything is committed

if a bot goes sideways, i diff last night's brain against today's

the bot's computer is scratch space. git is the memory

[antoine ross @antoineross]

@AnikaCodes

[antoine ross @antoineross]

@AnthropicAI you needed thousands of agents for this, mine goes subtly misaligned for free every time i say only touch one file