
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
Kineti: file-bound test receipts, registered rollback, and a spend log with a cap for AI coding agents
v0.3.9File-bound test receipts and registered rollback for AI coding agents.
Also a spend log with a cap. MIT. Works with Claude Code, Cursor, OpenCode, Codex and Antigravity through MCP.
$ kineti spend status
total $0 of $50; entries 0; tripped=false
$ kineti spend log --stage build --model sonnet --tokens-in 400000 --tokens-out 200000
logged $4.2 (stage build); run total $4.2
$ kineti spend log --stage build --model opus --tokens-in 100000 --tokens-out 60000
kineti: SPEND BREAKER TRIPPED: stage build total $10.2 reached ceiling $9.5 (exit code 3)
$ kineti spend check
kineti: TRIPPED: stage build total $10.2 reached ceiling $9.5 (exit code 3)
$ kineti spend reset
kineti: reset requires --i-am-human (breakers are human-only) (exit code 2)
$ kineti spend reset --i-am-human
breaker reset by human (exit code 0)
core-native/)Rust core with a hash-chained ledger and a commit check. Spend breaker exits with code 3 at 95% of recorded spend.
bin/, src/)rollback incomplete, exits 1, and that step stays pending.kineti-evidence.ts.bin/kineti-evidence.ts).src/harness/benchmark.ts are design targets, not measured results: the ALE 76.4% pass rate, SWE-bench 4.2 min MTTR, and $0.31 per-outcome numbers are goal constants for the evaluation program. They have not been produced by empirical runs.Prerequisite: The CLI is distributed on npm and runs on Node.js (>= 18), but requires Bun (>= 1.1) installed on the system for governance execution (
curl -fsSL https://bun.sh/install | bash).
# Install globally (latest)
npm install -g kineti
# Or pin to the current stable release
npm install -g kineti@0.3.9
# Or run directly with npx
npx kineti --help
Run Kineti as an MCP server in your editor for test receipts, registered rollback, and a spend log with a cap. The agent reports each model call and its cost. Kineti adds up what is reported. At 95% of $50 ($47.50) the log command exits with code 3. Your agent or hooks need to act on that code. Kineti does not stop the agent itself yet.
Run Kineti's auto-configurator in your project directory:
kineti init
This detects your installed hosts (Claude, OpenCode, Codex, Cursor, Antigravity, Gemini, fx.sh), copies the 17 workflow skills into each one, writes the ~/.kineti/repo pointer, and prints the safety-hook block to paste into your host settings. Use kineti init --host <name> to install into a single host, or kineti init --install-root to add the project rule files.
MCP server config is not written automatically. Add it with the manual step below for your editor.
Claude Code (CLI):
claude mcp add kineti npx -y kineti mcp
Cursor:
Add to your project's .cursor/mcp.json or Cursor Settings $\to$ Features $\to$ MCP:
{
"mcpServers": {
"kineti": {
"command": "npx",
"args": ["-y", "kineti", "mcp"]
}
}
}
Windsurf uses a different path: ~/.codeium/windsurf/mcp_config.json, with the same mcpServers JSON.
OpenCode:
opencode mcp add kineti -- npx -y kineti mcp
Or add the block below to ~/.config/opencode/opencode.jsonc:
{
"mcp": {
"kineti": {
"type": "local",
"command": ["npx", "-y", "kineti", "mcp"]
}
}
}
Confirm with opencode mcp list.
Codex (CLI):
Add to ${CODEX_HOME:-$HOME/.codex}/config.toml:
[mcp_servers.kineti]
command = "npx"
args = ["-y", "kineti", "mcp"]
Confirm Codex sees Kineti:
codex mcp list
Kineti should appear in the list.
Google Antigravity: Install the Kineti skills into Antigravity:
kineti init --host antigravity
Gemini uses the same installer:
kineti init --host gemini
Neither host ships an MCP config block here, so connect the MCP server through your editor's generic MCP settings with the fields in the next section.
Fx.sh: Install skill rules directly to your fx environment:
kineti init --host fx
Claude Desktop:
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"kineti": {
"command": "npx",
"args": ["-y", "kineti", "mcp"]
}
}
}
Cline / Roo Code:
Add a stdio MCP server in settings (Cline: .clinerules/mcp_settings.json, Roo Code: .roo/mcp_settings.json):
kinetinpx["-y", "kineti", "mcp"]# Start the visual companion dashboard (Apple HIG)
kineti companion
# Open http://127.0.0.1:8788
# Start the MCP governance server directly
kineti mcp
# Check spend circuit breaker status ($50 default ceiling)
kineti spend check
# Run tests and save cryptographic proof receipt
kineti test -- echo hello
# Verify cryptographic test evidence freshness
kineti test check --label test
# Run stage-agnostic CI verification
kineti ci
All 8 native crates are published on crates.io:
# Add native core nervous system to your Rust project
cargo add kineti-core
# Or install the native CLI binary directly
cargo install kineti-cli@0.3.9
# Run all 251 native Rust unit and integration tests locally
cargo test --manifest-path core-native/Cargo.toml
# Run the 5 native verification demo flows
cargo run --package kineti-cli -- test-all
kineti/
├── bin/ # TypeScript Governance CLI tools (single router: kineti.js)
│ ├── kineti.ts # CLI router source (spend, saga, evidence, companion, mcp, ci)
│ ├── kineti-spend.ts # Self-reported spend circuit breaker ($50 ceiling, exit code 3, trips on recorded totals)
│ ├── kineti-saga.ts # LIFO undo stack & transactional rollback
│ ├── kineti-evidence.ts # Delimited SHA-256 test proofs bound to git tree hashes
│ ├── kineti-companion.ts # Apple HIG visual companion server (loopback only)
│ └── kineti-mcp.ts # Model Context Protocol (MCP) server
├── core-native/ # Pure Rust Nervous System Workspace (8 crates, 0 external dependencies)
│ ├── Cargo.toml # Workspace manifest
│ └── crates/
│ ├── kineti-core/ # Double-buffered snapshots, HLC, Kernel, Commit Gate
│ ├── kineti-memory/ # Epistemic Engine, Multi-scope context, Tombstones
│ ├── kineti-reflex/ # Fast sensory classification & emoji reflexes
│ ├── kineti-connectors/ # Protocolized connectors & permission gating
│ ├── kineti-actions/ # Action execution & confirmation gates
│ ├── kineti-gateway/ # Messaging webhooks & bridge
│ ├── kineti-harness/ # Outcome Verification Tickets (OVT) & Shadow workspaces
│ └── kineti-cli/ # Standalone native CLI binary
├── src/ # Shared TypeScript libraries (governance, scheduler, security)
├── skills/ # 17 agent workflow skills (installed by setup.sh)
├── hosts/ # 7 editor configurations (Claude, Cursor, Codex, OpenCode, Gemini, Antigravity, fx.sh)
├── hooks/ # 6 hook text blocks for host setup
├── public/ # Static documentation & legal assets
├── website/ # Static landing page (index.html plus video poster assets)
├── docs/ # Architecture specifications & security reports
│ ├── README.md # Docs index
│ ├── PLAN.md # Canonical production architecture spec
│ ├── ARCHITECTURE.md # Rust core internals (not the CLI pitch)
│ ├── research/ # Research notes, not part of the CLI
│ ├── SECURITY_REPORT.md # Security audit & origin gating analysis
│ ├── TUTORIAL-first-run.md # Developer quickstart
│ ├── HOWTO-daily-loop.md # Daily operating loop
│ ├── SWARM_COORDINATION_AND_IDENTITY.md # Multi-agent identity & signing
│ └── MULTI_REPO_FLEET_AND_INTEGRATIONS.md # Fleet and integration design
├── tests/ # 191 TypeScript governance & causal test suites
├── .github/ # GitHub Actions CI, issue forms, PR template, Dependabot
├── AGENTS.md # Universal rules for AI agents in this repository
├── SECURITY.md # Vulnerability disclosure policy & SLAs
├── CONTRIBUTING.md # Development setup, testing, and DCO sign-off
├── LICENSE # MIT License
└── package.json # kineti@0.3.9 npm package manifest
Today Kineti provides local ledger tooling, spend circuit breakers, and evidence verification that agents invoke during their lifecycle (conventions in hooks/ plus self-reported proofs via kineti-spend.ts and kineti-evidence.ts). An in-line MCP proxy gate with deterministic allow/ask/deny interception is in active sprint.
#![forbid(unsafe_code)] enforced across all critical crates.$50.00 default cap per project, settable at mirror time ($1-$1000); tooling exits with code 3 at 95% of recorded totals.For full architecture deep-dives and research treatises, refer to docs/README.md.
If you are an AI agent working in this repo, read AGENTS.md first. It holds all rules, workflows, memory spec, and program references in one file.
Distributed under the MIT License. See LICENSE for more information.
Humans and agents follow the same steps in CONTRIBUTING.md: setup, tests with proof, money rules, and the ship checklist.
FAQs
Kineti: file-bound test receipts, registered rollback, and a spend log with a cap for AI coding agents
The npm package kineti receives a total of 249 weekly downloads. As such, kineti popularity was classified as not popular.
We found that kineti demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.