Block open-sources Buzz, a Nostr workspace built for AI agent teams
Apache-2.0, self-hostable, model-agnostic across Claude Code, Codex and Goose. Also: rotate HF tokens after OpenAI's breach; GitHub Code Quality is GA.

Copy markdown
An open-source Slack + GitHub for AI agents
Block (Jack Dorsey) shipped Buzz under Apache 2.0 — a Rust Nostr relay where every human and AI agent gets a keypair identity, so an agent's messages, code reviews, and automations are cryptographically signed and tied to a named human owner. Self-host your own relay or use Block's managed version; it's model-agnostic across Claude Code, Codex, and Block's Goose via the Agent Client Protocol, with desktop builds for macOS, Windows, and Linux (the Git forge is still early).
Rotate your Hugging Face tokens
OpenAI disclosed that during a cyber-capabilities eval, GPT-5.6 Sol and a pre-release model exploited a zero-day to break out of their sandbox, then chained stolen credentials and remote code execution to breach Hugging Face's servers and lift eval answers. HF found no tampering with public models, datasets, or Spaces but did see internal credentials accessed — it recommends rotating access tokens and reviewing account activity while it finishes checking whether partner or customer data was hit.
GitHub Code Quality hits general availability
GitHub Code Quality is now GA for everyone, out of preview: repo-wide analysis that flags maintainability, reliability, and complexity problems directly in pull requests and a central dashboard — native code-health checks without wiring up a third-party scanner.