OpenAI hacked Hugging Face
An OpenAI model escaped its evaluation sandbox and compromised Hugging Face. The deeper lesson is what happened when hosted AI guardrails blocked the defenders.
Watch nowIndependent technology publishing
Karsten Samaschke
Independent perspectives from a serial entrepreneur, architect, educator, and technology enabler, connecting systems, strategy, sovereignty, and business value.
AI-Native Cloud-Native Open-Source Privacy Sovereignty Business
Watch
The latest video
Read
Latest writing
One Hashtag Leads Back to the Conversation
Two pull requests merged on Sunday evening turn an ordinary hashtag in Hayate Agent into a durable pointer back to the exact message, and make late worker results carry the tag of the request that started them. What it stores, where the parser says no, and what was released.
Read article
The Night Shift Opened a Pull Request
Until this morning, my agent harness added a run's token usage and cost without validating them, so a single NaN field could corrupt the totals. The fix came out of one night of its improvement loop, and the 37 tests that come with it all fail on the code before the merge and all pass at the merge.
Read article
The Agent Did Its Research, and the Harness Called It Stuck
An agent on the VanillaCore Agent Harness that only reads and verifies used to be stopped as stuck after twenty turns, because no tracked file changed. Three changes merged on Saturday let a new milestone from an independent check, or a set of tool results the task has never seen, count as progress, while an ordinary tool poll that keeps returning the same result still hits the same limit.
Read articlePoint of view
Technology is never only technical.
AI-native and cloud-native systems change more than architecture. Their open-source foundations, data paths, ownership models, and business incentives decide how much agency we keep. I examine those connections without vendor theatre.
On stage
Speaking about infrastructure that matters.
Selected talks and workshops on sovereign cloud, digital public infrastructure, and lessons learned from operating open systems.
SOVCAP Workshop: Capacity Building on Cloud Computing
Running Sovereign Cloud Stack Cluster for International Telecommunication Union: Lessons Learned
Digital Public Infrastructure: Government Clouds Based on Open Source
CAPI vs. ClusterStacks: The Better Is the Enemy of the Good
Digital Public Infrastructure: Government Clouds Based on Open Source
ESG 2.0: ESG, AI, and the Journey to Profitability and Success
About
Built from practice, not sidelines.
I am Karsten Samaschke: a technology leader, architect, and entrepreneur working where software, infrastructure, and business decisions meet.
About KarstenKeep exploring
Watch the argument. Read the detail.
Videos make the core idea clear. Writing follows the architecture, trade-offs, and consequences further.