OSSzachlatta/freeflow Free Voice CodingGitHub·high signalXBlueskyLinkedInCopy linkFree open-source alternative to Wispr Flow. Hold Fn to record, context-aware transcription via Groq API. 551 stars in 48 hours.SourceSource pageGitHub↳ Follow the threadStack layer / Threat patternCROSS-CATEGORY: The Guardrail Layer Around Coding Agents Shipped at Four Different Points in the Lifecycle in 48 HoursHacker News Show HN and Product Hunt (2026-08-24 and 2026-08-25)Policy dependency / Stack layerCherry Studio v2.0.9 unifies tool approval into one declarative policy and lets the provider catalog hot-update without an app releaseGitHubStack layer / Threat patternUnlose Takes Windows VSS Snapshots Before Coding Agents Run, Rejecting the Command-Blocking ApproachGitHub (via Show HN, 2026-08-25)Stack layer / ContrastMicrosoft's Agent Lightning v1.0.1 ships an agent skill whose job is optimizing other agents, installed through gh skillGitHubPolicy dependency / Stack layerHalofy ships an open governance layer for agents with identity, policy, provenance, audit and signed erasureGitHubPolicy dependency / Threat patternmcp-shell Ships Security Off in One Deploy Path and Bypassable in the Other (CVE-2026-55580/55581/55582)GitHub Security AdvisoriesStack layer / Update threadOnyx CLI v1.4.0 turns its gateway into a drop-in Anthropic and OpenAI endpointGitHubStack layer / ContrastAn unauthenticated RCE proof of concept for exposed DeepSeek Harness web instances is public on GitHubGitHub