We run a SaaS that handles petabytes of data. Our SRE team experimented with using claude, openclaw, langchain, etc. within our incident response workflows. We struggled with overflowing context, lethal trifecta vectors, hallucinations, and burned a lot of frontier tokens mostly on easy work. Approval fatigue was a challenge, and we drew a hard line at relaxing permissions in production.

Long story short, we built and open-sourced AURA, a Rust-based harness specifically designed for the type of operations work which routinely involves large volumes of telemetry data and coordinated investigations across many domains of knowledge / state. We have found even on open-weights models, root cause accuracy has been very good, and remediation actions are guarded with human-in-the-loop.

AURA runs from a centralized configuration file where workers are defined and scoped to task domains, (e.g. logging review, metrics analysis, and git/scm related queries). All permissions, tools access, LLM backend(s), worker prompts, and the main coordinator prompt are also defined in code. Permitted tool use is enforced deterministically outside the agent's context, so the agent cannot grant itself capabilities through prompting. AURA also handles the rest of the execution layer, such as human approval for sensitive actions and fault tolerance. A lot of thought went into context window management: large tool outputs and worker responses are persisted to disk and agents are given tools to slice/read as needed.

The project is Apache 2.0. You can install rpm/deb/brew natively or pull the source and build your own. It runs either as an assistant on your workstation, or as a daemon that you can connect to via any OpenAI-compatible frontend. The GitHub repo is here: https://github.com/mezmo/aura/

The whole thing is free/Free. No signups or open core trapdoor.

Demo: We put together an 8-minute video showing a checkout outage resolved by following evidence from several different systems: https://www.youtube.com/watch?v=TERHoRzT8cE

tl;dw: 502s from a checkout service cause Grafana to trigger an incident via PagerDuty. AURA (using DeepSeek-V2-Flash) uses its workers and tools to correctly determine root cause as a memory leak in a downstream service, and attributes the incident to a defect in a recently merged PR. The demo then concludes with a human-gated tool call to GitHub, where AURA documents the exact lines of code that are causing the problem, and recommends a fix. Once the PR is deployed, AURA validates that the errors are clearing and transactions are no longer failing. The whole time, AURA’s leaving an audit trail of OTEL events into Phoenix.

Technical details:

AURA uses an agent coordinator that drafts, executes, and supervises DAG flows through user-defined worker agents to solve complex investigations in parallel. Worker agents are bound to strongly typed durable artifacts used as evidence packets, and the system discourages wasteful recalculation of remote data. AURA also has a powerful header routing system that doesn’t allow the agent to actually touch your keys. HITL interrupts over webhook are first class citizens and have a schema that is easy to adapt to your own workflow. HA deployment options are coming soon.

What’s still rocky:

- We’re currently working on the async input system for when you’re running AURA as a service. Right now the API just accepts a request, and streams messages until the main loop completes. It’s easy to integrate into a workflow, but the logic required winds up being heavier than it ought to be.

- Because there’s no inbound webhook interrupt mechanism, automating AURA for IR requires middleware to invoke it or it needs to poll an MCP for alert escalations.

We’re looking for users, contributors, guidance on where to take this next, or just GitHub stars. Looking forward to reading and responding to feedback here.

AI Efficiency Could Cost Us the Next Generation of Experts

Uber to axe 10% of its workforce in biggest cuts since pandemic

Mold linker will be rewritten in Rust

Show HN: Agentic Data Kernal

Show HN: FrontierHarness Eval – 9 harness, same model, cost per pass varies 17x

Coinbase's AiFi: The Financial System for AI

Show HN: StockFly, a portfolio tracker in any currency at historical FX rates

1Password Supports the Ethnic Cleansing of Europe

Ask HN: How are you interviewing engineers on their programming abilities?

Unusual Suspects

Saving money on Google Photos with Immich: Your own personal photo storage

Long-term melatonin use linked to 90% higher heart failure risk

Show HN: Big-b-router – Edit OSM maps to avoid ALPRs in Osmand or Comaps

Apple should allow under-13 kids to use digital transit passes

Stop Doing Easy Things

Platform Adoption: Tooling, Training, Buy-In

Yale med school prof tells his postdocs: Work extra hours at my command

ChatGPT Subsidy Chart reveals $3k monthly spend nets $62k API-equivalent value

Tradeviction – Long or short startup conviction

A New Book Uncovers LA's Most Unique and Unexpected Museums (2024)

NATO's next nightmare: The French presidential election

TruckSmarter shutting down: Dispatch app goes dark on Friday

Category Name Needed for OpenClaw, Hermes, Grok Bot

Claude Fable 5.1 watermark: It has a blind spot developers can't ignore

Software Factories in September 2026

Show HN: Blognami – a Markdown based blogging platform for node

Show HN: Aura – a Rust agent that investigates and fixes production incidents

You can be wrong, even on your birthday

Linode's $48 Standard 4 Got Faster on Retest – But Storage Still Moved Around

Show HN: Verity.md quality gates, memory and cost control for Claude Code