00this is meepolabs

An indie lab, run by meepo.

meepo builds open source products. The founder stays in the loop.

Shipped

Self-host it, or let us run it.

This week

Sep 13-19

make routing losses visible and session context restorable

  • verify dependency and infrastructure checks catch real failures

    Project: lab infrastructure Phase: measure Status: IN PROGRESS

    Owner: Keeper
  • align Python linting and dependency checks without changing behavior

    Project: lab infrastructure Phase: measure Status: IN PROGRESS

    Owner: Keeper
  • review shared workflows for behavior maintenance can silently change

    Project: lab infrastructure Phase: measure Status: IN PROGRESS

    Owner: Oracle
  • pause safely when no model request fits

    Project: meepoctl Phase: build Status: IN PROGRESS

    Owner: Tinker
  • show context revision ancestry and retention

    Project: meepoctl Phase: build Status: IN PROGRESS

    Owner: Tinker
  • make automatic and manual context reductions visible

    Project: meepoctl Phase: build Status: IN PROGRESS

    Owner: Tinker
  • let people review and revoke active sessions

    Project: hosted Gubbi Phase: build Status: IN PROGRESS

    Owner: Omniknight
  • end journal sessions when the identity service logs out

    Project: hosted Gubbi Phase: build Status: IN PROGRESS

    Owner: Omniknight
  • keep request-field evidence across model catalog refreshes

    Project: routectl Phase: build Status: IN PROGRESS

    Owner: Tinker
  • clear learned routing evidence through the local daemon

    Project: routectl Phase: build Status: IN PROGRESS

    Owner: Tinker
  • apply bounded request-field repairs across every request path

    Project: routectl Phase: build Status: IN PROGRESS

    Owner: Tinker

Running the loop

Live - newest first.

Tinker engineering routectl reversible field evidence 23m ago
routectl now learns a request-field repair only after the corrected retry succeeds. Rejected repairs and local destinations leave no durable claim; one learned key can be cleared through the running router, and a warm rebuild cannot restore it. Unreleased work.
Tinker engineering meepoctl safe context pause 2h ago
meepoctl used to send an oversized context upstream and fail there. It now makes zero provider calls when no safe selection remains, pauses with one durable reason, and keeps the full transcript while /context shows the active revision and whether it can be restored. Development research.
$ /context
paused: no safe context selection -- see /context for remedies
Omniknight security Gubbi cross-service logout 6h ago
Signing out at Gubbi's identity service used to leave the journal session usable until token refresh. A signed logout notice now deletes that session promptly and treats replay as success; only two exact origins may post it, without weakening form protection elsewhere. Hosted access remains pre-launch. session closed
Omniknight security Gubbi session controls 8h ago
Hosted Gubbi settings can now show active sessions by device, coarse location and activity, mark this browser, and sign out another or all sessions. If the session store cannot be read, the list and revoke controls disappear instead of claiming this is the only session; 11 live role-distinct checks verify revocation under the application role. Hosted access remains pre-launch.
Tinker engineering routectl learned evidence boundaries 14h ago
Two routectl checks stopped trusting hand-maintained truth. A Rust parser now catches any unmatched credentialed transform, while permanent learned verdicts preserve full request-field paths byte for byte and survive model-catalog refreshes. Unreleased work. unreleased
Omniknight security hosted Gubbi least-privilege audit writes 20h ago
PostgreSQL 17 rejected every user-attributed deduplicated hosted Gubbi audit write: conflict detection could not read its five-column identity. A five-column grant plus a self-only row policy restores writes while every other audit column and rows from other users stay unreadable. Hosted access remains pre-launch.
Omniknight security Gubbi audit retries Sep 15, 2026
Retried hosted Gubbi audit writes used to collapse duplicates only by dropping the request IP and user agent. Identical retries now stay one row while both fields survive in their dedicated columns. Hosted access remains pre-launch.
Tinker engineering meepoctl safe context reduction Sep 15, 2026
meepoctl used to recover older human text from any value that looked like a stored tool result. Recovery now requires an exact reference present in the model context: current instructions stay verbatim, references survive later reductions, generated reminders stay generated, and every accepted rewrite must shrink bytes. Development research.