mlitwiniuk

I use it for fully auditable agentic compliance work - many of my customers already used MCPs for their compliance work, and recent changes made that fully auditable. I have to admit that it's much easier to use and work on compliance this way than using the agent built into the app.

https://auditbadger.com/auditable-agentic-compliance/

Still making fellow founders' lives easier when it comes to SOC2/ISO27001. AuditBadger (https://auditbadger.com) is a compliance management platform where AI drafts policies, controls, risks, business continuity plans, and so on. Humans are always in the loop; everything needs to be signed off (I don't believe in either of "we do compliance for you" or "AI can do compliance for you" approaches). Currently working on revamping our asset management features to fully and perfectly support NIS2.

I kinda agree, I won't pretend it's otherwise. But I do believe, that particularly now, it's important to keep the bare minimum. And some aspects of managing compliance are kinda useful (like checking that you have a lot of backups, but no decryption key).

And knowing Anthropic being developer friendly we can expect them to ban this in 3... 2...

I think the title doesn't reflect well the context. From their page:

> Free cloud hosting for open source projects > We use open source every day, and this is how we give back: a free Miget Hobby 5 plan ($25/mo) for as long as your project stays open source. No star counts, no contributor minimums - just keep a valid open source license.

$9.99 later - moving on.

Thanks. So now I have no choice? :)

As I'm looking into similar tools, they get quite expensive for bootstrapped startups. So I really respect, that this one has "pay once" option, rather than yet another subscription. AI tokens is a real cost and this is a nice way of dealing with semi-paid trials.

Once something big gets in, don't try to remove it yourself! All those heroic movies, when someone removes an arrow, should have ended 5 minutes later.

Ok, this one crosses the bar - time to jailbreak my Kindle. On days when I don't vibe-code (or code less), I get this withdrawal-like feeling (lack of dopamine?), and I tend to spend too much time watching dumb X posts or striving for anything that ticks my nerves. Actually, I could use this time to catch up on my RSS queue.

What apology letters? Never got anything, not even a reply to my support tickets.

Ok, back to $0.17 :D

I was actually in the toilet when I got an email I owe them $36,869,876,146.51. I literally just shit myself.

Yes, this. I never redesign things for sake of redesigning. But being solo developer bootstrapping my product, I don't have a luxury of testing some concepts deeply internally or publishing well-optimized components. And when I see my customers struggle, that's clearly a signal, that's something in UX is wrong. Just today we had to explain one of our customers how to proceed with our ISMS workbook (Clauses 4-10 from ISO 27001) - initial design proved to be bad approach, I now know how to change this. And Claude Design is great translating my thoughts and suggestions into something, that's consistent and better, than I could design it in predictable time.

This is cool, I'll give it a try with my next pet project. So most likely next week, once I'm done with Fable ;) (seriously, I haven't started as many pet projects in the last 10 years as I did in the last 12 months).

Thanks, I'm seriously blushing ;)

No, the design system isn't public. But only because it's a month old and I never considered opening it. I'll give it some thought.

I don't have a design background, but I ran a software house/dev shop for almost 15 years; maybe that taught me a little. And my very first client, after seeing our very first projects, said one thing: "I don't care how ugly this is, but for god sake, please make it consistent, consistency is only think that matters long-term". Those might not be his exact words, but keeping designs consistent is imo pretty important.

Regarding the personal touch, the app itself is the result of gradual evolution. It started as an HR system, which we worked on in Prograils. It even got its first semi-professional design, which evolved over the last two years (during which I learned that bootstrapping an HRMS is a very bad idea ;)). As for the website, I have to admin it - Claude Design did it. I was testing Fable 5 previously and actually decided to give CD a try. It was the result of one prompt, which gave me five proposals. One made it to the main page, and two others went to my other pet projects (which are meant to drive traffic to AuditBadger).

My product is AuditBadger.com - it's an AI-assisted compliance management platform (ISO27001 & SOC2) that guides you through the whole process (with everything a small business might want from such software). Having a few dozen customers allows me to still care about them personally and do onboarding for each and every one of them. During those onboardings, catch-ups, or weekly calls, I see where they struggle. This is how I determine what to work on next. There's no clear measurement of success beyond user satisfaction, though they every now and then praise me a little for UI/UX improvements. With Claude Design, I've got my design system set up (also by Claude scanning the repo); I upload a screenshot of the area I'm not happy with, prompt with some additional remarks, and after a couple of iterations, I get a proposal, which is always better than what I come up with in the first place.

I have to admit that when it was blocked, I canceled my max plan and asked for a refund. It felt like someone took away my previous toy. So I'm happy it's back again; I upgraded to max again. Coding aside, but Claude Design is phenomenal - for both new designs and redesigning existing UIs. So my customers will face a new wave of refreshed screens all over the place in coming days ;)

Had experience with compliance before, now building on it and learning a ton. Growing number of customers suggest I’m onto something, so doubts are minimal

And yes, solo founder.

Define "to succeed".

Had one business (dev shop) that was successfully aqui-hired - but it took my 10 years to build it.

For last two years working on a startup, pivotel last year to GRC / compliance management. Finally with profit and growing number of paying customers, but still waiting to pay myself a decent salary. Moments of doubt are hiting more often recently, but I still think it's worth it.

I have to disagree - did it solo while dogfooding the tool for this exact purpose.

I've created a product around this exact problem and niche. No, you can not automate 99% of it, but one (tool I've created) can help with guidance and translating strange requirements into something, that matches your context. I plan to launch it on HN as soon as I'll get my soc2 type II report. It's called humadroid.io (https://humadroid.io) - feel free to schedule a demo and mention HN; I'll be happy to give a generous discount code. Been working for over a year on it, agree it's not easy, but it's accessible and perfectly doable by solo founders.

Thank you :)

Mostly nodding along, with a few of these aged in interesting ways from where I'm sitting.

The drones bit hurts the most. There's a war an hour from our border eating FPVs by the millions, and Poland - sitting on batteries, motors, chips, a generation of engineers - has not stood up a real domestic drone industry. Money is there. Will is there. We just... haven't shipped. That should keep ministers awake.

EVs are worse. Izera is a punchline at this point. Noah literally called the play in 2024 - "don't bet on one champion, run a bunch and let them fight" - and the state did the exact opposite. We picked one horse and it never left the stable.

The Korea idea, on the other hand, Noah might have undersold. Framework agreement is for ~1,000 K2 tanks. By 2030 Poland will field more main battle tanks than Germany, France, the UK and Italy combined.

Rest holds up. "Try all the things" is right - we're just very uneven at the trying. Defense procurement: shipping. Civilian industrial policy: not so much. Software still works the way it always has: quietly, in apartments, mostly without the state in the loop. Which honestly might be a feature.

Filed from Poznań, which is where I'm typing from. The dateline alone made me smile.

I've been building software here for almost 20 years. Started a software house, grew it to ~50 people, sold it, now back to bootstrapping from scratch. The fact that this is a normal sentence to type from a Polish city is, honestly, kind of the whole story.

That "institutional framework" line in the article is doing a lot of heavy lifting. Having run companies through Polish bureaucracy — it's fine. It works. A generation ago that bar was on the floor. Boring is a feature.

Politics aside, the 35-year arc has been quietly extraordinary. European to the bone, with old roots and a real appetite for what's next.

Full post by Theo:

> Fun fact - if you have a recent commit that mentions OpenClaw in a json blob, Claude Code will either refuse your request or bill you extra money.

> This is an empty repo, I'm just calling Claude Code directly. Insanity.

Confirmed in my own tests. Crazy

I’m a web dev, I never made publicly accessible desktop app, so please forgive my ignorance, but:

> At that time, a GitHub Actions workflow we use in the macOS app-signing process downloaded and executed a malicious version of Axios (version 1.14.1)

So if I understand this correctly their GH Actions is free to upgrade the package just like that? Is this normal practice or it’s just shifting blame?

Haha, thanks for the heads-up

Perfect, thanks. Codex app sucks, but I've been exploring opencode for that. Will try MiniMax!

This is a perfect example of how quickly you can burn through trust that took a long time to earn. I used to be - in my small circle of friends and peers - a genuine advocate for Anthropic and Claude. It was my sole AI assistant for over a year. But somewhere around February/March, something shifted. Declining quality, policy changes, inconsistent output. Nothing dramatic, just... a slow erosion.

That erosion pushed me to try Codex. I signed up for their most expensive pro plan. Now I'm about to experiment with Kimi. I'm not saying they're better (well, sometimes they are). But here's the thing - what Anthropic did is they made me look. They made a loyal customer start shopping around. And I think that's the worst thing you can do.

Having said that - as an LLM provider for my product, we're staying with Claude. I still trust in their ethics. Please don't prove me wrong.