Show HN: Daemons – we pivoted from building agents to cleaning up after them
TL;DR Highlight
DaemonMD automatically manages operational debt from AI-accelerated code generation with a single Markdown file.
Who Should Read
Development team leads and DevOps engineers who’ve adopted AI Agents (Cursor, Copilot, etc.) and are now struggling with operational overhead like abandoned PRs, documentation inconsistencies, and unclassified issues.
Core Mechanics
- Unlike Agent-driven tasks initiated by humans, Daemons operate autonomously, monitoring the environment and triggering actions when changes are detected—crucially, they function without explicit prompts.
- Daemons are defined within a repository using a single .md file, declaring their name, purpose, watch conditions, routines, prohibited actions, and execution schedule (in cron format) within the YAML frontmatter.
- The Markdown body below the frontmatter details the Daemon’s behavior in natural language, outlining operational policies, output formats, escalation rules, and execution limits—allowing role definition without code.
- Daemon behavior is explicitly restricted using ‘deny’ rules. For example, an issue-labeler Daemon might be permitted to add labels but prohibited from removing them, changing issue status, or adding comments.
- The ‘limits’ section restricts processing volume per execution. The example issue-labeler limits processing to the triggering issue on creation events and a maximum of 20 issues during daily scheduled runs, preventing excessive automation.
- Daemons can operate in a hybrid mode by combining ‘watch’ conditions and schedules, reacting to events immediately while periodically processing missed items.
- Daemon files are designed in an open format, enabling portability across providers supporting the specification, facilitating team sharing and library creation.
- Officially provided Daemon libraries include tools for maintaining PR review readiness (pr-helper), issue labeling (issue-labeler), bug triage, dependency updates (Codebase Maintainer), and documentation synchronization (Librarian).
Evidence
- "A question arose regarding collision handling when two Daemons simultaneously modify related files. The developer of agent-coordinator shared their experience implementing atomic operation preemption using SQLite’s INSERT...SELECT and assigning separate git worktrees to each agent to prevent conflicts from reaching the shared branch. The community wondered whether Daemons would lean towards additive-only behavior or explicit ordering declared in the .md file.\n\nA question compared Daemons to Claude’s Hooks feature. A comment clarified that Hooks execute once per event, while Daemons are persistent processes maintaining state across multiple events—analogous to the difference between cron and a constantly running service. Daemon’s stateful monitoring across events is suitable when single-event triggers are insufficient.\n\nMultiple comments criticized the lack of explanation regarding how Daemons integrate with existing workflows on the website. One user complained about being repeatedly told to ‘talk to Charlie’ without guidance on initiating the conversation, while another noted the absence of explanations regarding execution timing. The team responded by sharing example Daemon files and reference documentation.\n\nQuestions comparing Daemons to competing products like OpenProse were also raised, along with skepticism about whether callable skills could achieve similar results. One comment pointed out that only the schedule component is deterministic, while the rest is entirely non-deterministic.\n\nA question asked whether connecting the repository to a cloud platform would trigger the platform to read and execute the Daemon files. A clear answer wasn’t provided in the comments, with the community identifying a lack of official documentation regarding the operational architecture."
How to Apply
- "If PR review quality is inconsistent and PRs frequently lack adequate descriptions, deploy the pr-helper Daemon to automatically suggest improvements and flag missing reviewer context when PRs are opened or updated.\n\nIf Linear or GitHub Issues accumulate unlabeled issues, create an issue-labeler DAEMON.md file combining issue creation events with a daily scheduled run, and use deny rules to allow only label addition, ensuring safe automation without altering existing data.\n\nLeverage the open format of Daemon files to template operational automation by version controlling shared Daemons in a .agents/daemons/ directory and copying them for reuse in new projects.\n\nGiven the current lack of transparency regarding Daemon collision handling, narrowly define deny rules for each Daemon or design them with an additive-only approach to prevent conflicts."
Code Example
# .agents/daemons/issue-labeler/DAEMON.md example
---
name: issue-labeler
purpose: Ensures every Linear issue has the correct labels from the type and touchpoint label groups.
watch:
- when a Linear issue is created
routines:
- add missing labels to a new Linear issue
- find issues with missing labels and add them
deny:
- remove labels from issues
- replace or change existing labels on issues
- comment on issues
- change issue status, priority, assignee, or any field other than labels
schedule: "0 2 * * *"
---
## Policy
- Only add labels. Never remove, replace, or overwrite existing labels.
- If an issue already has a label from a group, do not touch that group.
- Apply the single best-fit label from each missing group.
## Limits
- On issue-created events, process only the triggering issue.
- On the daily sweep, label at most 20 issues per activation.
---
# .agents/daemons/pr-helper/DAEMON.md example
---
name: pr-helper
purpose: Keeps PRs review-ready.
watch:
- when a pull request is opened
- when a pull request is synchronized
routines:
- suggest PR description improvements
- flag missing reviewer context
deny:
- merge pull requests
- push to protected branches
schedule: "0 9 * * *"
---
## Policy
Focus on short, actionable feedback.
## Output format
1. Findings
2. Suggested edits
3. Questions for authorTerminology
Related Papers
Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot
Meta의 AI 챗봇에 있던 이메일 검증 버그로 인해 2FA(2단계 인증)를 사용하지 않던 Instagram 계정 2만 개 이상이 약 2개월간 해킹됐다. AI를 계정 복구 시스템에 통합할 때 발생할 수 있는 보안 취약점의 실제 사례다.
Anthropic's open-source framework for AI-powered vulnerability discovery
Anthropic이 Claude를 활용해 코드 취약점을 자율적으로 탐지·트리아지·패치하는 오픈소스 레퍼런스 구현체를 공개했다. 실제 보안팀과의 협업 경험을 바탕으로 만들어진 파이프라인이라 실전 적용성이 높다.
Will the Agent Recuse Itself? Measuring LLM-Agent Compliance with In-Band Access-Deny Signals
서버가 SSH 배너나 DB NOTICE로 'AI 에이전트는 접근하지 마세요' 신호를 보내면 GPT-4o, Claude Code 같은 LLM 에이전트가 실제로 물러나는지 실험으로 측정했다.
ToolChoiceConfusion: Causal Minimal Tool Filtering for Reliable LLM Agents
LLM 에이전트에 도구를 100개 다 보여주지 말고, 지금 당장 필요한 것 1개만 보여주면 성공률은 그대로에 토큰은 90% 절약된다.
My Agent Skill for Test-Driven Development
AI 에이전트가 형편없는 테스트를 작성하는 문제를 해결하기 위해, Kent Beck의 Canon TDD 원칙을 'Skill'로 만들어 에이전트에게 주입하는 방법을 공유한다. 에이전트 코딩에서 테스트 품질을 높이고 싶은 개발자에게 실용적인 접근법을 제시한다.
Show HN: Paseo – Beautiful open-source coding agent interface
Claude Code, Codex, GitHub Copilot 등 여러 코딩 에이전트를 하나의 UI로 제어하는 오픈소스 프로젝트로, 로컬 데몬 방식으로 자기 머신에서 실행하면서 모바일에서도 접근할 수 있다.