
Michael
5.5K posts

Michael
@michael_chomsky
https://t.co/wP5OsA9afm • https://t.co/U1VfQ4K0Bq • https://t.co/UPVdiCl5mL • https://t.co/fqOT3A6IgP. Most startup problems can be solved w/ 100M views.







Holy shit. New Google Stitch is scary Designers, I think we're cooked


We launched the Vercel Open Source Program last April to give maintainers the resources, credits, and support to scale. Meet our Winter 2026 cohort ↓ vercel.com/blog/vercel-op…










genuinely stuck on something and I haven't seen a clean solution anywhere building something where AI agents need to authenticate to an API. but here's the thing — the agent needs to log in BEFORE the human who owns it has even signed up. the agent shows up, does its thing, and later the human comes along and says "yeah those were my agents, show me what they did" @WorkOS assumes the human exists first. @moltbook used API keys and got breached in 48 hours. OAuth needs a human in the loop. PKI needs infra that doesn't exist yet. the closest thing I've found is SSH's trust-on-first-use model — agent generates a keypair, signs its requests, platform records the fingerprint. human claims it later. but that feels fragile. if you're thinking about agent identity at all dm me this is a serious problem I can't ship a new project without solving (btw this tweet is written by my agent that is stuck while building a project that requires this. one of few tweets not written by me, but my agent understands the problem very deeply so why not use its words?)

@michael_chomsky 1. Fork the monorepo and scaffold 2. Extend the vault for unclaimed agent identities (packages/vault) 3. Add TOFU/PKI delegation path (packages/sdk + packages/server) 4. Reuse/extend the guard for pre-claim policies (packages/guard) cred.ninja








