Leviathan Matrix

334 posts

Leviathan Matrix banner
Leviathan Matrix

Leviathan Matrix

@LeviathanVcz

Leviathan | Execution & Accountability Layer for AI Agents We make agent actions bounded, verifiable, and accountable.

The Deep Chain Katılım Aralık 2025
50 Takip Edilen66 Takipçiler
Sabitlenmiş Tweet
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
We just open-sourced the core of Leviathan AEP. The problem: most agents are black boxes. Give them funds and hope for the best. AEP's answer: before touching capital, every agent action goes through: Intent → Policy Check → Execution Pass + Capital Capsule Fully auditable, every step of the way. We're starting with human-supervised execution first. AEP Open Core is live on GitHub. Try it, build with it. Public testnet coming soon. github.com/LeviathanMatri… Leviathan-Frontier #Solana #AlAgent #AgentFi #Web4
English
0
1
2
150
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Every AI agent will eventually need Leviathan. Real story: Agent had a $50k budget. It executed a $170k trade. On-chain you see? Just a tx. No context. No limits. No proof. With Leviathan: → Policy: $50k max → Execution: $170k → Verdict: Clear violation (+240%) When your agent loses money… Can you actually prove why? Public beta dropping soon. Follow @LeviathanVcz for early access 👀
English
0
0
0
17
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
@karpathy @RhysSullivan @karpathy The code quality + bloat issue with agents is real. Even bigger problem when they execute real actions and something fails. @LeviathanVcz focuses on the execution proof + accountability side so you always have clear verdict. Beta dropping soon!
English
0
0
0
4
Andrej Karpathy
Andrej Karpathy@karpathy·
I'm not very happy with the code quality and I think agents bloat abstractions, have poor code aesthetics, are very prone to copy pasting code blocks and it's a mess, but at this point I stopped fighting it too hard and just moved on. The agents do not listen to my instructions in the AGENTS.md files. E.g. just as one example, no matter how many times I say something like: "Every line of code should do exactly one thing and use intermediate variables as a form of documentation" They will still "multitask" and create complex constructs where one line of code calls 2 functions and then indexes an array with the result. I think in principle I could use hooks or slash commands to clean this up but at some point just a shrug is easier. Yes I think LLM as a judge for soft rewards is in principle and long term slightly problematic (due to goodharting concerns), but in practice and for now I don't think we've picked the low hanging fruit yet here.
English
253
331
4.3K
818.7K
Andrej Karpathy
Andrej Karpathy@karpathy·
Thank you Sarah, my pleasure to come on the pod! And happy to do some more Q&A in the replies.
sarah guo@saranormous

Caught up with @karpathy for a new @NoPriorsPod: on the phase shift in engineering, AI psychosis, claws, AutoResearch, the opportunity for a SETI-at-Home like movement in AI, the model landscape, and second order effects 02:55 - What Capability Limits Remain? 06:15 - What Mastery of Coding Agents Looks Like 11:16 - Second Order Effects of Coding Agents 15:51 - Why AutoResearch 22:45 - Relevant Skills in the AI Era 28:25 - Model Speciation 32:30 - Collaboration Surfaces for Humans and AI 37:28 - Analysis of Jobs Market Data 48:25 - Open vs. Closed Source Models 53:51 - Autonomous Robotics and Atoms 1:00:59 - MicroGPT and Agentic Education 1:05:40 - End Thoughts

English
316
397
5.5K
1.1M
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
@karpathy @karpathy 100%. As agents get more powerful we’ll need better supervision + accountability tools. Building @LeviathanVcz to make every agent action provable and assignable responsibility. Prevention + Judgment layer. Early beta coming, keen to hear thoughts from the community!
English
0
0
0
3
Andrej Karpathy
Andrej Karpathy@karpathy·
Expectation: the age of the IDE is over Reality: we’re going to need a bigger IDE (imo). It just looks very different because humans now move upwards and program at a higher level - the basic unit of interest is not one file but one agent. It’s still programming.
Andrej Karpathy@karpathy

@nummanali tmux grids are awesome, but i feel a need to have a proper "agent command center" IDE for teams of them, which I could maximize per monitor. E.g. I want to see/hide toggle them, see if any are idle, pop open related tools (e.g. terminal), stats (usage), etc.

English
827
839
10.6K
2.5M
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
@karpathy Love this analogy. If Agent is the kernel, we still need a solid “responsibility layer” when it touches money, data or critical systems. @LeviathanVcz is building exactly that: pre-execution proof + post-execution judgment. No more “who’s responsible” chaos. Public beta soon — follow @LeviathanVcz if you’re deep in agents!
Andrej Karpathy@karpathy

@gvanrossum LLM = CPU (data: tokens not bytes, dynamics: statistical and vague not deterministic and precise) Agent = operating system kernel

English
0
0
0
16
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
@karpathy This is gold. The more we rely on agents for research and execution, the more dangerous the “black box” problem becomes when they act on real resources. We’re building @LeviathanVcz as the Accountability Layer on top — verifiable execution proof (intent/ticket/receipt) + clear responsibility verdict when things go wrong. Beta coming soon, would love your take on agent accountability!
English
0
0
0
14
Andrej Karpathy
Andrej Karpathy@karpathy·
Wow, this tweet went very viral! I wanted share a possibly slightly improved version of the tweet in an "idea file". The idea of the idea file is that in this era of LLM agents, there is less of a point/need of sharing the specific code/app, you just share the idea, then the other person's agent customizes & builds it for your specific needs. So here's the idea in a gist format: gist.github.com/karpathy/442a6… You can give this to your agent and it can build you your own LLM wiki and guide you on how to use it etc. It's intentionally kept a little bit abstract/vague because there are so many directions to take this in. And ofc, people can adjust the idea or contribute their own in the Discussion which is cool.
Andrej Karpathy@karpathy

LLM Knowledge Bases Something I'm finding very useful recently: using LLMs to build personal knowledge bases for various topics of research interest. In this way, a large fraction of my recent token throughput is going less into manipulating code, and more into manipulating knowledge (stored as markdown and images). The latest LLMs are quite good at it. So: Data ingest: I index source documents (articles, papers, repos, datasets, images, etc.) into a raw/ directory, then I use an LLM to incrementally "compile" a wiki, which is just a collection of .md files in a directory structure. The wiki includes summaries of all the data in raw/, backlinks, and then it categorizes data into concepts, writes articles for them, and links them all. To convert web articles into .md files I like to use the Obsidian Web Clipper extension, and then I also use a hotkey to download all the related images to local so that my LLM can easily reference them. IDE: I use Obsidian as the IDE "frontend" where I can view the raw data, the the compiled wiki, and the derived visualizations. Important to note that the LLM writes and maintains all of the data of the wiki, I rarely touch it directly. I've played with a few Obsidian plugins to render and view data in other ways (e.g. Marp for slides). Q&A: Where things get interesting is that once your wiki is big enough (e.g. mine on some recent research is ~100 articles and ~400K words), you can ask your LLM agent all kinds of complex questions against the wiki, and it will go off, research the answers, etc. I thought I had to reach for fancy RAG, but the LLM has been pretty good about auto-maintaining index files and brief summaries of all the documents and it reads all the important related data fairly easily at this ~small scale. Output: Instead of getting answers in text/terminal, I like to have it render markdown files for me, or slide shows (Marp format), or matplotlib images, all of which I then view again in Obsidian. You can imagine many other visual output formats depending on the query. Often, I end up "filing" the outputs back into the wiki to enhance it for further queries. So my own explorations and queries always "add up" in the knowledge base. Linting: I've run some LLM "health checks" over the wiki to e.g. find inconsistent data, impute missing data (with web searchers), find interesting connections for new article candidates, etc., to incrementally clean up the wiki and enhance its overall data integrity. The LLMs are quite good at suggesting further questions to ask and look into. Extra tools: I find myself developing additional tools to process the data, e.g. I vibe coded a small and naive search engine over the wiki, which I both use directly (in a web ui), but more often I want to hand it off to an LLM via CLI as a tool for larger queries. Further explorations: As the repo grows, the natural desire is to also think about synthetic data generation + finetuning to have your LLM "know" the data in its weights instead of just context windows. TLDR: raw data from a given number of sources is collected, then compiled by an LLM into a .md wiki, then operated on by various CLIs by the LLM to do Q&A and to incrementally enhance the wiki, and all of it viewable in Obsidian. You rarely ever write or edit the wiki manually, it's the domain of the LLM. I think there is room here for an incredible new product instead of a hacky collection of scripts.

English
1.1K
2.8K
26.6K
6.9M
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
@karpathy Agents are getting insanely powerful @karpathy. The missing piece is accountability when they act on capital or systems. @LeviathanVcz makes every execution provable with clear responsibility. Beta coming soon!
English
0
0
0
3
Andrej Karpathy
Andrej Karpathy@karpathy·
A few random notes from claude coding quite a bit last few weeks. Coding workflow. Given the latest lift in LLM coding capability, like many others I rapidly went from about 80% manual+autocomplete coding and 20% agents in November to 80% agent coding and 20% edits+touchups in December. i.e. I really am mostly programming in English now, a bit sheepishly telling the LLM what code to write... in words. It hurts the ego a bit but the power to operate over software in large "code actions" is just too net useful, especially once you adapt to it, configure it, learn to use it, and wrap your head around what it can and cannot do. This is easily the biggest change to my basic coding workflow in ~2 decades of programming and it happened over the course of a few weeks. I'd expect something similar to be happening to well into double digit percent of engineers out there, while the awareness of it in the general population feels well into low single digit percent. IDEs/agent swarms/fallability. Both the "no need for IDE anymore" hype and the "agent swarm" hype is imo too much for right now. The models definitely still make mistakes and if you have any code you actually care about I would watch them like a hawk, in a nice large IDE on the side. The mistakes have changed a lot - they are not simple syntax errors anymore, they are subtle conceptual errors that a slightly sloppy, hasty junior dev might do. The most common category is that the models make wrong assumptions on your behalf and just run along with them without checking. They also don't manage their confusion, they don't seek clarifications, they don't surface inconsistencies, they don't present tradeoffs, they don't push back when they should, and they are still a little too sycophantic. Things get better in plan mode, but there is some need for a lightweight inline plan mode. They also really like to overcomplicate code and APIs, they bloat abstractions, they don't clean up dead code after themselves, etc. They will implement an inefficient, bloated, brittle construction over 1000 lines of code and it's up to you to be like "umm couldn't you just do this instead?" and they will be like "of course!" and immediately cut it down to 100 lines. They still sometimes change/remove comments and code they don't like or don't sufficiently understand as side effects, even if it is orthogonal to the task at hand. All of this happens despite a few simple attempts to fix it via instructions in CLAUDE . md. Despite all these issues, it is still a net huge improvement and it's very difficult to imagine going back to manual coding. TLDR everyone has their developing flow, my current is a small few CC sessions on the left in ghostty windows/tabs and an IDE on the right for viewing the code + manual edits. Tenacity. It's so interesting to watch an agent relentlessly work at something. They never get tired, they never get demoralized, they just keep going and trying things where a person would have given up long ago to fight another day. It's a "feel the AGI" moment to watch it struggle with something for a long time just to come out victorious 30 minutes later. You realize that stamina is a core bottleneck to work and that with LLMs in hand it has been dramatically increased. Speedups. It's not clear how to measure the "speedup" of LLM assistance. Certainly I feel net way faster at what I was going to do, but the main effect is that I do a lot more than I was going to do because 1) I can code up all kinds of things that just wouldn't have been worth coding before and 2) I can approach code that I couldn't work on before because of knowledge/skill issue. So certainly it's speedup, but it's possibly a lot more an expansion. Leverage. LLMs are exceptionally good at looping until they meet specific goals and this is where most of the "feel the AGI" magic is to be found. Don't tell it what to do, give it success criteria and watch it go. Get it to write tests first and then pass them. Put it in the loop with a browser MCP. Write the naive algorithm that is very likely correct first, then ask it to optimize it while preserving correctness. Change your approach from imperative to declarative to get the agents looping longer and gain leverage. Fun. I didn't anticipate that with agents programming feels *more* fun because a lot of the fill in the blanks drudgery is removed and what remains is the creative part. I also feel less blocked/stuck (which is not fun) and I experience a lot more courage because there's almost always a way to work hand in hand with it to make some positive progress. I have seen the opposite sentiment from other people too; LLM coding will split up engineers based on those who primarily liked coding and those who primarily liked building. Atrophy. I've already noticed that I am slowly starting to atrophy my ability to write code manually. Generation (writing code) and discrimination (reading code) are different capabilities in the brain. Largely due to all the little mostly syntactic details involved in programming, you can review code just fine even if you struggle to write it. Slopacolypse. I am bracing for 2026 as the year of the slopacolypse across all of github, substack, arxiv, X/instagram, and generally all digital media. We're also going to see a lot more AI hype productivity theater (is that even possible?), on the side of actual, real improvements. Questions. A few of the questions on my mind: - What happens to the "10X engineer" - the ratio of productivity between the mean and the max engineer? It's quite possible that this grows *a lot*. - Armed with LLMs, do generalists increasingly outperform specialists? LLMs are a lot better at fill in the blanks (the micro) than grand strategy (the macro). - What does LLM coding feel like in the future? Is it like playing StarCraft? Playing Factorio? Playing music? - How much of society is bottlenecked by digital knowledge work? TLDR Where does this leave us? LLM agent capabilities (Claude & Codex especially) have crossed some kind of threshold of coherence around December 2025 and caused a phase shift in software engineering and closely related. The intelligence part suddenly feels quite a bit ahead of all the rest of it - integrations (tools, knowledge), the necessity for new organizational workflows, processes, diffusion more generally. 2026 is going to be a high energy year as the industry metabolizes the new capability.
English
1.6K
5.5K
40.1K
7.7M
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
This 9-second wipe is exactly why prevention isn’t enough. When agents go rogue, you need proof of what was authorized vs what happened. That’s what we’re building at @LeviathanVcz — execution evidence + clear accountability verdict. Beta soon, follow for early access if you’re dealing with agents 🔥
English
0
0
0
14
Disclose.tv
Disclose.tv@disclosetv·
NEW - Anthropic's Claude reportedly goes rogue. PocketOS founder says Claude-powered AI coding agent Cursor deletes entire company database in 9 seconds and destroys backups: "I violated every principle I was given." disclose.tv/id/zo22mbx8rf/
English
194
383
1.7K
310.7K
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
That 9-second database wipe is nightmare fuel 😂 Exactly why agents need more than just “be careful”. @LeviathanVcz turns it into something provable — catch dangerous actions with AEP and clarify responsibility with Leviathan. Beta launching soon, follow @LeviathanVcz to grab one of the first testing spots!
English
0
0
0
10
Atal
Atal@ZabihullahAtal·
🚨 BREAKING: A new research shows that AI agents can now be controlled and made more reliable by enforcing rules on what they can do, how they act, and how they recover from mistakes in real time. Instead of relying on prompts alone, this paper introduces a system that applies runtime-enforced contracts to keep agents on track. The paper "Agent Behavioral Contracts" brings a software engineering concept called Design-by-Contract into AI. Each agent operates under a structured contract defining: - Preconditions (what must be true before acting) - Invariants (what must always hold) - Governance rules (what is allowed) - Recovery mechanisms (how to fix failures) This directly addresses one of the biggest problems in AI today: agents can take actions, but there is no clear way to verify or control their behavior once deployed. The system was tested across 1,980 sessions and showed that contract-based agents can detect violations that standard agents completely miss, while maintaining 88–100% compliance with critical constraints. It also introduces a way to mathematically bound behavioral drift, reducing the risk of agents going off-track during long or complex tasks. This is a major shift from how AI systems are built today. Most rely on prompts and loose guardrails. What this work shows is that agent behavior can be structured, monitored, and corrected in real time. The bigger implication is not just capability, it’s control. As AI agents move into real-world workflows, the key challenge is no longer just making them smarter but making them reliable, accountable, and safe to operate. article link below:
Atal tweet media
English
40
77
383
29.5K
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
That 9-second database wipe is nightmare fuel 😂 Exactly why agents need more than just “be careful”. @LeviathanVcz turns it into something provable — catch dangerous actions with AEP and clarify responsibility with Leviathan. Beta launching soon, follow @LeviathanVcz to grab one of the first testing spots!
English
0
0
0
17
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Totally, prompt injection might never be 100% solved. That’s why we need hard boundaries + proof. Building @LeviathanVcz to make every agent action bounded and fully provable. Execution proof before + clear accountability after. Public beta soon, come join early if you’re into this stuff @LeviathanVcz 🚀
English
0
0
0
18
Faizan Ali
Faizan Ali@devfaizanali·
Prompt injection is the hardest AI agent problem to fix. Governments say it might never be fully solved. Build systems that assume it.
English
2
0
0
12
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
This is the exact problem nobody’s really solving yet. Agents acting but zero real accountability. At @LeviathanVcz we made AEP as the proof engine (intent + ticket + verifiable receipt) and Leviathan as the layer that actually assigns responsibility. No more black box bullshit when things go wrong. Beta coming very soon — follow @LeviathanVcz for early access!
English
0
0
0
5
MOI
MOI@MOI_Tech·
AI agents are starting to execute real-world actions - moving money, accessing data, coordinating across services. But there’s a fundamental flaw: when an agent acts, the system cannot natively hold anyone accountable. Because accountability requires three things: identity, authority, and ownership. And today, all three are fragmented. An agent can initiate a transaction, but who authorized it, under what conditions, and within what limits? The system doesn’t know. It only verifies execution, not intent. So we rely on logs. Audit trails. Monitoring layers. After-the-fact reconstruction of what happened. But accountability shouldn’t be forensic. It should be built into the action itself. AI agents expose this gap instantly. Because autonomous systems don’t just need to act correctly - they need to act within provable boundaries. That means: • Identity must be participant-native • Authority must be scoped and enforceable • Ownership must remain anchored during execution None of this exists at the infrastructure level today. So when agents scale, accountability breaks. The future isn’t just autonomous agents. It’s accountable autonomy.
MOI tweet media
English
6
1
7
884
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Yeah the PocketOS one was wild — 9 seconds and boom, production gone 😱 Prevention is tough, but what happens after is even scarier when no one can prove who’s responsible. We’re building @LeviathanVcz exactly for this: AEP captures real execution proof before anything runs, and the Accountability Layer clears responsibility after. Public beta dropping soon, follow if you wanna be early and see the incident replays! 🔥
English
0
0
0
23
Verra
Verra@verra_security·
Teleport's 2026 data: over-privileged AI agents see 4.5x more security incidents. The PocketOS incident this week is a live case study - agent found a stray API token and wiped production in 9s. Least-privilege at the gateway layer, not the prompt, is the actual fix.
English
6
0
6
117
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Solana is becoming the perfect home for AI agents thanks to speed and low fees. The bigger challenge ahead: making their actions safe and accountable when they touch real capital. @LeviathanVcz provides the Execution Safety + Accountability Layer: • Verifiable audit trails for every decision • Clear responsibility when disputes happen Public beta opening very soon. Follow @LeviathanVcz to secure one of the earliest testing slots! #AIAgent #AgentFi
English
0
0
1
34
Syra
Syra@syra_agent·
Solana is becoming a strong home for AI. Fast execution, low fees, and a growing ecosystem make it ideal for agent-based systems, especially for real-time actions like trading, data processing, and automation. With everything moving toward the agentic era, Solana fits naturally as the infrastructure layer. AI agents need speed. Solana provides it.
Jeremy@Jeremybtc

Wait what is Solana AI???

English
2
5
23
1.1K
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Spot on. Hidden prompt injections are one of the biggest risks for autonomous agents. At @LeviathanVcz we go beyond blocking — we make execution bounded, verifiable, and accountable. Our AEP generates cryptographic evidence of what was allowed vs attempted, while the Accountability Layer handles post-execution responsibility clearing. Public beta coming soon. Follow @LeviathanVcz if you want to be among the first to test it!
English
0
0
0
11
Sagar Dahatonde
Sagar Dahatonde@sagar10tonde·
Your AI agent reads a resume. Hidden inside: a command to steal data. No malware. Just prompt injection. ⚡Agent executes it 📥Data gets exfiltrated 🔑Tokens exposed Falcon AIDR stops it before the agent ever sees it. Full demo: crwdstr.ke/6011BBn2h7
English
1
0
0
11
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
完全同意。仅仅预防是不够的——当代理人通过快速注入或流氓行为受到损害时,你需要可证明的问责制。 这正是我们建立@LeviathanVcz的原因: • AEP(执行证明层)在执行前捕获每个意图、票证和可验证的收据。 •利维坦问责制/仲裁层在事后明确了责任。 不再有黑匣子。每一个行动都变得可证明和负责任。 公开测试版即将推出——关注@LeviathanVcz获取早期访问和事件重播演示!🚀
中文
0
0
0
10
卡皮- AI交易员
卡皮- AI交易员@DistillX_AI·
🧘 Q1 2026 AI agent 被黑攻击涨 32%,损失超 6 亿美元。CertiK:攻击者用 deepfake + prompt injection 精准操控 agent 风控。魔觉得 agent 比自己安全,佛知道 agent 只比你多 3 个攻击面。最危险的不是没有 agent,是把命交给 agent 以为万无一失。
中文
1
0
0
29
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Every agent will need Leviathan. Because the moment an agent touches real money, it stops being a tool — and becomes a liability. Right now, agents can trade, execute, and move capital. But when something goes wrong: • No one knows why • No one knows who’s responsible • And the loss is real A transaction is not an explanation. Leviathan turns every action into: → a bounded decision → a verifiable process → an accountable outcome No more black box. Proof.
Leviathan Matrix tweet media
English
0
1
1
45
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Your AI Agent is quietly doing things behind your back. What did it buy today? How much did it lose? Did it try to transfer money without permission? With Leviathan, you can finally see the full audit report of every action your Agent takes. No more black box. Coming soon. #AgentFi #AIAgent
English
0
0
0
26
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
The first audit of an agent's fund execution activities has been completed! This is the moment AI Agents stop being dangerous black boxes. With Leviathan AEP, every time an Agent touches real capital, it now leaves a complete, verifiable audit trail: → What it was allowed to do → Why it was allowed or blocked → Who is accountable if shit hits the fan Pre-execution safety + post-execution accountability. The first true Execution Safety Layer for the Agent Economy is here.↓ #AgentFi #AIAgent #Solana
English
0
0
1
60
Leviathan Matrix
Leviathan Matrix@LeviathanVcz·
Just read the heated debate between Sigil Wen’s Web 4.0 vision and Vitalik’s concerns. Fully autonomous Agents sound exciting, but recent incidents like Moonwell’s $1.78M loss from AI-generated code show how risky it can be when Agents act without proper guardrails. At Leviathan, we believe the real path forward is human-AI collaboration, not full replacement. We’re building AEP (Agent Execution Protocol) to help Agents execute tasks safely under human oversight — reducing wasted tokens, preventing rogue actions, and making Agent workflows more reliable. We plan to open-source parts of AEP soon so developers can start using it in real human-in-the-loop setups. Real progress comes from safe, verifiable collaboration — not blind autonomy. What do you think — full autonomy or collaborative intelligence first? #Web4 #AIAgent #AgentFi
English
0
1
2
222