This is why my in-progress framework ^[1] does not have:

• any markdown
• any skill files
• any unauthorized "memories"

but instead:

• declarative, signed capabilities, that
• run exclusively on reviewed and signed binaries, of which
• authorized instruction set (by line) is one such skill

did I mention single use context? yes, single use context. Saves 10M tokens per day too.

Things can be secured. You just need to design it.

1. if I ever get to finish it now that I'm spending all my credz on asking questions about SN code, lmao ↩