Journey

Tidak cukup postingan untuk diringkas!

[Javaensis @kangbedahhh]

Lagi siaran malah ada mobil MBG tabrakan 😭

[raa - DM TOLONG MT/REP🙏🏻 @zzsecretra]

dikabarin sama abang warnet kalo fullbooked trs ternyata mereka udh masukin billing dr h-1 atau h-2 buat booking jadi itu billing komputer jalan trs sampe WAR…..😭😭😭😭😭😭😭 GILEEE

[Elon Musk @elonmusk]

NASA Artemis passing close to the Moon

[Wiqi Lee @wiqi_lee]

Just published a new article on Medium about Assumption Miner! Check it out👇🏻
https://t.co/XE08DwrvJN

[Wiqi Lee @wiqi_lee]

AI agents today can act on your behalf with far more access than you realize. Give them your Gmail credentials and they can read, send, delete, and forward messages on your behalf.

I built Vettra to fix that.

Vettra is a real-time authorization middleware for AI agents. Every action is intercepted, risk-scored, and routed through a policy engine before it executes.

• Low-risk → approved automatically
• Sensitive → requires human approval
• High-risk → denied outright

The agent never touches credentials.

Auth0 Token Vault with RFC 8693 token exchange issues scoped, time-limited tokens only after explicit approval.

No static API keys.
No leaked secrets.
No blank checks.

What the demo shows:
• Real-world threat simulation
• Human-in-the-loop approval queue
• Hash-chained audit log with SHA-256 integrity verification
• Live Auth0 Token Vault integration
• Rust WASM policy verifier
• One-line protect decorator

Built with:
• FastAPI on Google Cloud Run
• React and Vite on Vercel
• Auth0 Token Vault
• Rust to WebAssembly via wasmtime
• WebSocket for real-time approval
• SHA-256 hash-chained audit log

Core ideas:
• Every action is scored from 0 to 100
• Human approval for sensitive steps
• WASM sandbox for policy integrity
• Zero credential exposure to agents
• Authorization as a real-time decision, not static configuration

Who this is for:
• Teams building AI agents with real-world access
• Engineers using LangChain, LlamaIndex, or custom frameworks
• Security and platform teams managing agent risk
• Anyone who wants control before an agent takes action

🔗 YouTube: https://t.co/FENY7Akqg8
🔗 Medium: https://t.co/es4jfrPIJw
🔗 Live demo: https://t.co/qT2Lx2o2Oq
🔗 GitHub: https://t.co/LdUgouykVC

@auth0 @Auth0Lab @devpost
#AIAgents #AISecurity #Auth0 #Rust #WASM #ZeroTrust #BuildInPublic

[Wiqi Lee @wiqi_lee]

Every production outage I've investigated had the same root cause.

Not a bug. Not a typo. An assumption.

"This API always responds under 500ms."
"Payments never fail on the first try."
"Uploads will never exceed 10MB."

No one writes these down. No one tracks them.
They just sit in the code until production proves them wrong.

This is assumption debt.
And every codebase has more of it than most people think.

So I built Assumption Miner.

A GitLab Duo Agent that catches the invisible logic your linters miss and your code reviews rarely question.

🧬 DNA Fingerprinting. Every assumption gets a stable identity that survives refactors, renames, and merges. Nothing gets lost between sprints.

🔮 Predicts what breaks next. Powered by a Rust + WASM scoring engine with Monte Carlo simulation, it forecasts codebase health 2 to 4 sprints ahead.

🛡️ Maps each assumption to real risk. CWE, OWASP Top 10, SOC2, PCI-DSS, GDPR. Your tech debt becomes a compliance report.

🛠️ Generates fixes automatically. Opens a branch and merge request.

🚦 Runs in your CI/CD pipeline. Health score drops below the threshold? Merge blocked.

Open a merge request. Get a health score, risk breakdown, and fixes, all without leaving GitLab.

🔗 https://t.co/Oip6bK92zO
🦊 https://t.co/vuBFjfw2Lz
▶️ https://t.co/vnVNuoVaaF

Built for teams tired of postmortems ending with "we assumed it would never happen."

For the engineer paged at 3am because of a hardcoded timeout.
For the tech lead inheriting a codebase full of silent assumptions.
For teams that want to move fast without getting paged at 3am.

Assumption debt is real.
Now you can see it before it breaks you.

@gitlab @devpost #GitLabAIHackathon #buildinpublic #devtools #AI #opensource #gitlab #gitlabduo #GitLabAI

[Wiqi Lee @wiqi_lee]

Just updated the demo video with proof of Google Cloud deployment. I also wrote a quick Medium article about how VoxGuard works.

Demo: https://t.co/CO6xZsvryD
Article: https://t.co/SUpTjph7m0

#GeminiLiveAgentChallenge

[Wiqi Lee @wiqi_lee]

Every 30 seconds, someone loses money to a phone scam.

Scams don’t work because people are careless. They work because pressure works. Scammers create urgency, fear, and false authority, and in that moment, even someone who knows the risks can still hand over what should never be shared.

That’s where most anti-scam advice fails. It doesn’t fail before the call. It fails during the call, when pressure takes over and rational thinking starts to break down.

And that gap is far bigger than any one person can handle.

According to the FBI IC3 2024 Annual Report, internet crime losses in the United States hit $16.6 billion in 2024. In its 2024 report, the Global Anti-Scam Alliance estimated global scam losses at more than $1.026 trillion over the past year.

So I built VoxGuard solo for the Google Gemini Live Agent Challenge.

VoxGuard is a real-time multimodal AI agent that detects scams and intervenes as they’re happening. Built with Gemini Live API, Gemini 2.5 Flash, Google Cloud Run, React, and Rust WebAssembly, it analyzes live audio and visual signals, raises a threat score in real time, detects manipulation patterns like Authority, Urgency, and Fear, delivers natural voice warnings, and generates a personalized recovery plan after Safe Exit.

I built VoxGuard for people who knew better and still got scammed.

GitHub: https://t.co/kGK8PJBUPs
Live Demo: https://t.co/8SlPJNDVl5

#GeminiLiveAgentChallenge #GeminiLiveAPI #GoogleCloud #MultimodalAI #ScamDetection #Rust

[Journey @kemasafir]

@wiqi_lee Woaahh, that scale is honestly wild

[Chelsea FC @ChelseaFC]

Three up at half-time! 👏

#CFC | #WOLCHE

[Journey @kemasafir]

@wiqi_lee @rezaradcliffe That’s basically a solo presentation, not group work 💀 lol. Did anyone else ever push back? You’ve known her longer. What did the others say when they realized she was treating you like that?

[Journey @kemasafir]

@KangManto123 Punten, aturanna kedah jelas tur transparan. Ulah nepi ka ngarugikeun warga nu teu salah.

[Journey @kemasafir]

@wiqi_lee @rezaradcliffe In group work, there should be real two-way discussion. But when you worked with her, it felt one-sided. She didn’t really listen to you and just kept pushing her own ideas. At some point, she needs to reflect and learn to listen to others, not just insist on being right.

[Chelsea FC @ChelseaFC]

#OnThisDay in 2024, Enzo did this at Villa Park. 💫

[Journey @kemasafir]

@ARSIPAJA Parah meen 👊🏻

[Journey @kemasafir]

@wiqi_lee @rezaradcliffe Sounds like you’re kinda exhausted dealing with people like her on a daily basis, huh? 😜

[Journey @kemasafir]

@skychiass @kompascom Bener…. ‘hah’ banget apa otak gue nggak nyampe

[Journey @kemasafir]

@wiqi_lee @rezaradcliffe Oh, so she started causing trouble with you guys first? Even though she’s the one being bullied and you’re the only ones who’ve stayed neutral? Wow, that’s crazy. She should be treating you as an asset. If she’s acting like this, she better be ready to be hated by many on campus.

[Journey @kemasafir]

@wiqi_lee @rezaradcliffe It seems like she doesn’t realize how detailed you’ve analyzed it. What if she sees this and gets mad at you? I think your analysis is valid if such a large population doesn’t like it. Just consider yourself one of the samples representing the whole population.

[Journey @kemasafir]

@wiqi_lee @rezaradcliffe Ah… where’s your Leo energy? Usually, Leos love to stand out in everything 😜

[Journey @kemasafir]

@wiqi_lee @rezaradcliffe Yup, attitude is way more important. She’s good at communication and soft-spoken, but that doesn’t hide her arrogance and ego-driven arguments, not data. For some, it feels like a waste of energy trying to prove something instead of doing the work. But she’s clingy with you, huh?