Design Engineer & Builder

github

Sergio Rovira • Peerlist

<h3>Pico Scan: Local-First Security Observability for AI Development</h3><ul><li>Discover dangerous paths: Pico maps how untrusted influence can reach consequential authority through coding agents.</li><li>Local-first approach: Operates entirely on your machine with a local SQLite database for storing the security graph.</li><li>Read-only operation: Ensures your environment remains untouched during the discovery process.</li><li>Evidence-backed attack paths: Provides clear, traceable evidence for identified attack paths, from untrusted influence to critical authority.</li><li>Core Functionality:<ul><li>Discover: Identifies coding agents, MCP servers, tools, permissions, credential references, and provider connections within a bounded scope.</li><li>Connect: Builds a security graph by connecting what can reach the agent and what the agent can reach, acknowledging 'UNKNOWN' as a valid state.</li><li>Explain: Surfaces attack paths as findings, detailing the chain of events, supporting evidence, enforced boundaries, and practical cut points.</li></ul></li><li>Key Features:<ul><li>No cloud account, control plane, or telemetry required.</li><li>Secrets are used transiently and never persisted.</li><li>Workspace scoped analysis with known configuration paths and fingerprint-only credential handling.</li><li>No Pico account or backend infrastructure needed.</li><li>Focuses on observing the existing environment and reporting on the actual graph.</li></ul></li><li>Installation: Simple one-line install via curl to `~/.pico/bin`.</li><li>Initialization: `pico init` creates the local `.pico/pico.db` workspace.</li><li>Scanning: `pico scan` discovers, graphs, and presents findings locally.</li></ul>Pico is built by Boring Infra Co., focusing on understandable, dependable, and inspectable infrastructure for developer tools.

Pico

Combie is the open engineering context layer for your stack.Connect GitHub, Vercel, Cloudflare, Sentry, Neon, and PlanetScale once, and Combie builds a shared understanding of your engineering stack what exists, how resources relate, what changed, and what happened before.Combie gives engineers and AI coding agents the context they need to understand the systems they're working with instead of starting from scratch every time.<ul><li>Connect your engineering stack. Bring context from your tools into one local layer.</li><li>Understand relationships. See how repositories, deployments, domains, projects, and infrastructure connect, backed by real evidence and provenance.</li><li>Get task sized context. Give engineers and agents the relevant context for change reviews, dependency analysis, investigations, and other engineering work.</li><li>Build operational memory. Preserve investigations, recommendations, decisions, actions, outcomes, and the evidence behind them.</li><li>Recall what happened before. Find similar past incidents and understand what was tried, what was decided, and what actually happened.</li><li>Use it from anywhere. Access Combie through the CLI or read only MCP from tools like Cursor, Claude Code, and Codex.</li></ul>Combie keeps engineers and agents working from the same context.

Combie

Rivora is an infra-native AGI that watches your systems, explains what’s breaking, and proposes safe fixes. It connects to your existing stack and correlates logs, metrics, traces, and incidents into a live narrative of what’s happening in production. No dashboards. No noisy alerts. No auto-actions unless you allow them. Just clarity, confidence, and control when it matters most.