Show HN: Emetgate – a verification gate between an LLM and your source tree
Emetgate is a deterministic verification kernel designed to sit between large language models and source code trees to ensure only valid changes are committed. It operates on the principle that the model proposes changes while the kernel verifies them, rejecting any output that fails structural or test-based checks. This architecture addresses common LLM failure modes by preventing unverified code from reaching the disk, effectively treating the model as a golem that requires external truth validation.
- ▪Emetgate uses a fail-closed deterministic kernel to verify LLM-generated code changes before they are written to the disk.
- ▪The system employs content addressing with 128-bit hashes to ensure proposals match the current state of the source code.
- ▪Changes are validated through AST parsing to confirm that only the intended function body is modified without syntax errors or scope escapes.
- ▪The kernel computes the blast radius of changes and runs full test suites in a sandbox for any modifications deemed unbounded.
- ▪Committed changes are written atomically using a journaled write-rename process to maintain data integrity.
Hacker News (AI / LLM) files mainly under ai. We currently carry 5,748 of its stories.
Story provenance
Source · retrieval · rights · ranking — open for full record
inspect →
Story provenance
Attribution is not the same as permission. This drawer separates discovery metadata, excerpts, WeSearch-generated summaries, reuse status, and whether the publisher receives the visit. Nothing here claims a legal grant the publisher has not made.
Record
| Original publisher | GitHub |
| Canonical URL | https://github.com/emetgate/emetgate |
| Publication time | Sun, 20 Sep 2026 19:29:19 +0000 |
| Retrieval time | 2026-09-20T19:38:46.841Z |
| Last seen | 2026-09-20T19:38:46.841Z |
| Headline source | Publisher (no WeSearch rewrite) |
| Excerpt source | publisher body |
| Excerpt method | First ~120 words (~800 chars) of extracted publisher body, fair-use limited. |
| Summary | WeSearch · cerebras-chat (WeSearch summarizer) |
| Summary source text | contentText |
| Citation coverage | Summary is a WeSearch-generated derivative; primary citation is the original publisher URL. |
| Cluster | 9z_lLjdZjLLF · 1 stories |
| Cluster logic | Grouped by semantic title/content similarity across sources within a rolling window. Same-publisher template collisions are excluded from coverage comparison. |
| Ranking reason | Story pages are not engagement-ranked. Hub feeds use recency, with optional source-diversified chronological ordering (cap consecutive stories per source). No personalized ranking. |
| Publisher visit | Yes — open original |
| Substitutes article? | No — link-out required for full text |
Rights status (four layers)
WeSearch handling by dimension
| Indexing | May the item be indexed (stored, ranked, made findable)? | Allowed |
| Snippet | May a short excerpt of the publisher's text be shown? | Allowed |
| AI summary | May WeSearch generate its own short summary of the article? | Limited |
| Retrieval / RAG | May the content be exposed for third-party retrieval-augmented generation? | Not asserted |
| Model training | May the content be used to train AI models? | Not asserted |
| Commercial reuse | May the content be reused commercially? | Not permitted |
Basis: Derived from the published RSS/Atom feed. Contact: [email protected]. Reviewed: 2026-07-24.
Opening excerpt (first ~120 words) tap to expand
Nothing passes but the truth. A deterministic verification kernel that sits between a language model and your source tree. A real session, rendered: a placeholder body, an escaped body, a stale hash and a write outside the shadow copy are all refused; a correct body is committed. The name In the legend of the Golem of Prague, a rabbi shapes a figure out of river clay. It is strong, tireless and obedient, and it has no judgment of its own. What animates it is a single word written on its forehead: אמת, emet, "truth". When the golem runs out of control, the rabbi erases the first letter. What remains is מת, met, "dead", and the golem falls back into clay. The three letters of emet are the first, the middle and the last letter of the Hebrew alphabet.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at GitHub.