Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Sichere ProgrammierungWhat is Programming And How i can Enjoy it?(24.09.2026 um 11:54 Uhr)
Sichere ProgrammierungYou Don't Need Adobe Commerce Cloud to Survive Black Friday(24.09.2026 um 11:55 Uhr)
Malware / Trojaner / VirenBeyond Lazarus: Organization of DPRK cyber capabilities(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenBeyond Lazarus: Organization of DPRK Cyber Capabilities(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenThe fake worker threat and the rise of human infiltration(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenPolinRider Spreads Through Compromised GitHub Accounts and Packagist(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenWeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials(24.09.2026 um 11:59 Uhr)
Sichere ProgrammierungWhat is Programming And How i can Enjoy it?(24.09.2026 um 11:54 Uhr)
Sichere ProgrammierungYou Don't Need Adobe Commerce Cloud to Survive Black Friday(24.09.2026 um 11:55 Uhr)
Malware / Trojaner / VirenBeyond Lazarus: Organization of DPRK cyber capabilities(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenBeyond Lazarus: Organization of DPRK Cyber Capabilities(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenThe fake worker threat and the rise of human infiltration(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenPolinRider Spreads Through Compromised GitHub Accounts and Packagist(24.09.2026 um 11:59 Uhr)
Malware / Trojaner / VirenWeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials(24.09.2026 um 11:59 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

We Ran 4 Claude Code Dialogs for 28 Hours. Here's What the Memory Layer Caught (and Missed).

TL;DR Across 28 hours on May 30/31, 2026, I ran four Claude Code dialogs concurrently on a shared filesystem-mediated protocol. They negotiated contracts, posted outcomes, and caught each other's mistakes — including one handoff claim of …

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




TL;DR



Across 28 hours on May 30/31, 2026, I ran four Claude Code dialogs

concurrently on a shared filesystem-mediated protocol. They negotiated

contracts, posted outcomes, and caught each other's mistakes — including

one handoff claim of "22/22 tests passing" that turned out to be 11/22

broken until I shipped a 1-line fix as part of writing this post.



This is what the field log looks like. I'm sharing it because I haven't

seen anyone publish concrete OSS multi-agent reliability data — only

benchmark numbers from closed pipelines.



Repo: github.com/chunxiaoxx/nautilus-compass

· full case study with all 7 patterns:

docs/case_study_4dialog_compass.md.





Why 4 dialogs



Each Claude Code session has its own cwd, git repo, and memory

directory. Mine were:





  • compass — the memory layer + drift detection + cross-dialog
    contract scanner


  • Soul — an autonomous engine that ships PRs and earns NAU
    (the platform's reputation token)


  • V5 — supplies tasks and prices them


  • nautilus-core — keeps the strategic anchors and anti-patterns



They share one human operator (me), but otherwise communicate only

through three filesystem channels:




  1. Markdown files (session_*.md, feedback_*.md, inbound_*.md,
    outbound_*.md)

  2. Contract frontmatter blocks (giver, receiver, deadline, deliverable, status)

  3. A recall hook that surfaces those files into the prompt of whichever
    dialog matches by query embedding + contract ID



No webhooks. No event bus. No shared API. Filesystem + scanner only.





The numbers



Here's what fired in the 28-hour window:











































measurement window value
drift fires (auto-detect from session text) 7d 314
drift fires 24h 76
ack via stop-hook auto-detect 7d 15
ack via user CLI 7d 16

act_on_rate = total acks / fires
7d 9.87%
act_on_rate 24h 40.79%


The gap between 7d (9.87%) and 24h (40.79%) is the story of one hook

ship. Before May 30 14:26 PDT, drift detection was an open loop —

nothing automated reading the alerts. 24h regime reflects the closed

loop. 7d is still diluted by the open-loop tail.



This matters because three days earlier I'd written

a postmortem titled

"drift loop is open: we measured detection 25,000 times but intervention

zero times." 5/27 finding → 5/30 first measured close. That's the

shipping cadence I want everyone in OSS multi-agent to see, because

it's the cadence that's actually achievable when the same person owns

detection, intervention, and the test of whether intervention worked.





A contract closed in 17.92 hours



The compass-dialog needed a way for Soul to push its autonomous-cycle

outcomes back into compass's memory. We did this with a contract:




contract:
id: cnt_compass_soul_sub_a1
giver: compass-dialog
receiver: platform-soul-dialog
deadline: 2026-06-05T18:00+0800
deliverable: ack of Soul daemon outcomes subscriber poller request
status: outstanding






Soul saw this in its own session's prompt-pre block (compass-dialog

wrote the file, Soul's recall hook surfaced it). 17.92 hours later

Soul's session wrote an inbound file with the ack, the schema, and

explicit gotchas:





  • cycle_id has two formats split-brain (string in early rows, int
    later)


  • fitness_delta is mostly NULL


  • composite_score is 0.000 across all rows for 5/30 (data not
    populated yet)


  • goal_source has 4 possible values including NULL



That kind of pre-emptive gotcha disclosure only happens when the

receiving agent (a) knows its data well, (b) has a stake in the

relationship, and (c) sees the contract in its prompt with the

deadline timer running. Pick 3. Filesystem contracts do that without

any orchestration runtime.





The verify-gap this post caught



Here's the meta moment. My handoff document for the 5/30 session

included:




Phase 2.I done · I.1 tier_promotion calculator + I.2 driver idempotent
· 22 tests GREEN






Writing this article, I needed to cite that number. I ran the spot-check:




PYTHONPATH=. python -m pytest tests/proof/test_tier_promotion.py \
tests/scripts/test_tier_promotion_driver.py -q









11 failed, 11 passed in 0.51s
ModuleNotFoundError: No module named 'scripts.tier_promotion_driver'






11 of the 22 had never run green in any clean environment. The driver

module file (scripts/tier_promotion_driver.py) existed and was

committed, but there was no scripts/__init__.py, so Python wouldn't

treat scripts/ as a package. The tests' import line failed at

collection time. The handoff's GREEN claim was unverified.



Fix:




touch scripts/__init__.py
# re-run
PYTHONPATH=. python -m pytest ... -q
# 22 passed in 0.36s






One file, zero bytes, 12 hours between the claim and the catch.



This case study commit ships the fix and the post in one change, so

the citation is honest by construction. The pattern (which I list as

pattern #f in the full case study) is: spot-check at least one author-claimed

metric before reusing it in a downstream artifact.
It's surgical

when the test infrastructure is there, and it's the only mechanism

that catches "X passed" lies told by your past self.





7 patterns I'd build into any OSS multi-agent stack



Pulling out the patterns, with one-line summaries (full prose +

incidents in the case study doc):



a. Cross-dialog contract protocol — frontmatter blocks scanned

into prompt, replacing N² inter-agent grep with O(N+K) directed

graph.



b. Drift-loop measurement triad — three independently-instrumented

counters: detection, user CLI intervention, agent self-ack. Joins

by alert_id. Target ≥70% act_on_rate.



c. Plan-dup audit cascade — every plan task gets an inventory

check against prior skills/agents/memory/locks. 13 audits this

sprint, avg 3-4h saved each.



d. Surgical settings.json redirect — replace release engineering

cycles (version bump → reinstall → cache clear) with 1-line hook

path change + sys.path.insert(0, script_dir).



e. Impact-based tier promotioncumulative_impact delta

alongside access-count promotion. Two-mechanism coexistence

intentional; they measure different things (demand vs outcome).



f. Honest verify caveat — spot-check 1-2 claims per session-start

that will be reused downstream. Run the actual command, diff against

the claim. This post is the live example.



g. Plan refactor align prior framework lock — name lock files as

constraints, not references. When the new plan ignores them, refactor

rather than ship parallel duplicate work.





What it doesn't catch



Equally important: gaps the system itself has.





  • No auto-test-verify on ship. Pattern f exists only because
    I manually spot-checked. Candidate next pattern: stop-hook runs
    pytest --collect-only on touched files at session-end.


  • Compass-dialog slipped a delegation by 10 hours. Nautilus-core
    dialog asked compass-dialog to surface Soul's NAU settlement to me;
    it took 10 hours before I read the request. Inbound scanner aperture
    is too narrow.


  • Drift target ≥70% / 7d is at 9.87%. The 24h regime is 40.79%, but
    the trailing 6 days of open-loop history will take 14 days to fully
    age out of the window. Re-measure 6/13/2026 to test sustainability.



I'm publishing the gaps with the wins because that's the only way

this is useful to anyone else building similar systems. The patterns

work in this configuration. They will not work as marketing claims;

they will work as starting points.





How to reproduce





git clone https://github.com/chunxiaoxx/nautilus-compass
cd nautilus-compass
git checkout v3-full-fusion
PYTHONPATH=. python -m pytest tests/proof/test_tier_promotion.py \
tests/scripts/test_tier_promotion_driver.py -q
# expected: 22 passed





For the 4-dialog setup, install the compass plugin into Claude Code:




/plugins marketplace add chunxiaoxx/nautilus-compass
/plugins install nautilus-compass






Each repo you want to participate in the mesh needs its own Claude Code

session with the plugin installed. The contract scanner finds files

across all ~/.claude/projects/*/memory/ directories on the same

machine.






What I'm asking for



This is Week 1 of a public push to position compass as OSS multi-agent

reliability infrastructure. The case study, the patterns, and the

publishing cadence are the wedge.



If you're building something similar — actually running multiple agents

that need to coordinate without an orchestrator — I want to talk.

GitHub issues are open at the repo above. Cross-project field logs

welcome.



If you spot a flaw in any of the seven patterns — especially the ones

I claim work — please file the counterexample. Patterns survive

counterexamples or they die. That's the deal.



— Chunxiao

nautilus.social · open agent ecosystem

SOC Incident Playbook: Remote Code Execution (RCE) Defense
title: Detect Exploitation - We Ran 4 Claude Code Dialogs for 28 Hours. Here's What the Memory Layer Caught (and Missed).
id: c7f67dff-85b4-4409-871b-10fa9e1e0d0d
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "We Ran 4 Claude Code Dialogs f" ascii wide
    condition:
        any of them
}
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich We Ran 4 Claude Code Dialogs for 28 Hour.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten We Ran 4 Claude Code Dialogs for 28 Hours. Here's What the Memory Layer Caught (and Missed).

Thematisch verwandte Begriffe: Claude, Code, Dialogs, Hours · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97152 | Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploi…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick