RyanTHawks

Invested in $TSLA, $SPCX, agentic and physical AI and the enormous compute that will be needed to power it.

[RyanTHawks @ryanthawks]

One paste. Four agents. A lesson your team can take.
Start free → https://t.co/vRTrdsaxZR

[RyanTHawks @ryanthawks]

@mattpocockuk Thank you Matt!

[RyanTHawks @ryanthawks]

Every week there's a new poisoned npm or PyPI package. I got tired of hoping my agents wouldn't install one, so they don't anymore.

Supply-Chain Guard is a free Grok Bot template. It freezes installs to the versions already in your lockfiles and pins checksums. It waits a week before trusting a brand-new release, and it checks your machines for known stealer tricks. It's read-only by default and asks before it changes anything.

Grab it here: https://t.co/lyIB2XfbQ4

[RyanTHawks @ryanthawks]

Your AI agent says "done."

Prove it.

Software Factory is one Grok Bot that takes a code change from brief to shipped, and it shows receipts at every step:

🔒 A state machine with a hash-chained ledger. No skipped steps, and every new commit gets re-verified.
🔍 An audit against your brief with file:line evidence, not vibes.
🧪 It catches quietly weakened tests and supply-chain drift.
✅ Live QA after deploy, plus a regression check when you swap models.
💸 Cheap models do the heavy lifting. If a router breaks, it fails loud instead of quietly running up your bill.

Nothing merges, deploys or posts without your yes.

Built on ideas from @poteto @mattpocockuk @kieranklaassen @obra @ericzakariasson 🙏

https://t.co/XmbtMK6Hid

[RyanTHawks @ryanthawks]

@goHeelBase It won't guess. stacked crossouts get flagged, it shows you that box with its best read of each number, and nothing exports until you pick the real score. coffee rings get the same treatment 🏓

[RyanTHawks @ryanthawks]

Dink Bot 🏓 a free Grok Bot for pickleball.

snap your club's score sheet, it reads every game, asks about the smudges, and spits out a DUPR-ready CSV. never judges your third shot drop.

@PPAtour @MajorLeaguePB @TheKitchenPB @Pickleball @USAPickleball

https://t.co/1gOTqtblrk

[RyanTHawks @ryanthawks]

@hwchase17 Made an Eval bot for skills as well:
https://t.co/6huGSZj4d3

[RyanTHawks @ryanthawks]

@DanHMcInerney @hwchase17 Made an Eval Bot for skills:
https://t.co/6huGSZj4d3

[RyanTHawks @ryanthawks]

@glebedel @hwchase17 Yes!
https://t.co/6huGSZj4d3

[RyanTHawks @ryanthawks]

Your AI agent says "done."

Prove it.

Software Factory is one Grok Bot that takes a code change from brief to shipped, and it shows receipts at every step:

🔒 A state machine with a hash-chained ledger. No skipped steps, and every new commit gets re-verified.
🔍 An audit against your brief with file:line evidence, not vibes.
🧪 It catches quietly weakened tests and supply-chain drift.
✅ Live QA after deploy, plus a regression check when you swap models.
💸 Cheap models do the heavy lifting. If a router breaks, it fails loud instead of quietly running up your bill.

Nothing merges, deploys or posts without your yes.

Built on ideas from @poteto @mattpocockuk @kieranklaassen @obra @ericzakariasson 🙏

https://t.co/XmbtMK6Hid

[RyanTHawks @ryanthawks]

@Baconbrix @bot

[RyanTHawks @ryanthawks]

For me... Passwords stay in 1Password, and I approve each sign-in on my phone so the bot fills it without ever seeing it. The Grok Bot vault only holds my name and email. I'd skip the CSV import too, since an unencrypted export of every password sitting on disk is the riskiest part.

[RyanTHawks @ryanthawks]

Nice! I went the other way with mine. Passwords stay in 1Password, and I approve each sign-in on my phone so the bot fills it without ever seeing it. The Grok Bot vault only holds my name and email. I'd skip the CSV import too, since an unencrypted export of every password sitting on disk is the riskiest part

[RyanTHawks @ryanthawks]

@poteto @kepano Building my own, makes perfect sense.

[RyanTHawks @ryanthawks]

Every week there's a new poisoned npm or PyPI package. I got tired of hoping my agents wouldn't install one, so they don't anymore.

Supply-Chain Guard is a free Grok Bot template. It freezes installs to the versions already in your lockfiles and pins checksums. It waits a week before trusting a brand-new release, and it checks your machines for known stealer tricks. It's read-only by default and asks before it changes anything.

Grab it here: https://t.co/lyIB2XfbQ4

[RyanTHawks @ryanthawks]

@_jsolly 💯

[RyanTHawks @ryanthawks]

Lots of hatches being battened. And while I moan about using the authenticator app... its now must. Be sure to set it up for GitHub and Cloudflare, two critical services I use - also on GitHub enable dependabot. Tons of other things to do to secure localhost and anything that touches wifi... Tailscale is a must have.

[RyanTHawks @ryanthawks]

@robinebers Thank you!

[RyanTHawks @ryanthawks]

@arpit_bhayani This is awesome - nightly audit agent is picking this up.

[RyanTHawks @ryanthawks]

@Baconbrix @bot Biggest cyber attacks in recent history and you're talking about your agents buying things on the internet! Love it! Legend.