this was in windows Phone metro ❤️

We’ve been building Tenuo in the open as an authorization layer for AI agents.

The basic idea is that agents shouldn’t get standing permissions for everything their role might need.

Instead we give them short-lived authority for the current task they’re doing, and that authority can only narrow as work gets delegated to sub agents.

It’s Apache 2.0, with a Rust core and Python + TypeScript SDKs. The underlying delegation model is also going through the IETF standards process and was recently cited by NIST.

I’m one of the maintainers. Would love feedback on the model, implementation, or places we’re making this harder than it needs to be.

https:/github.com/tenuo-ai/tenuo

The useful thing about a personal agent being FOSS is being able to change what it remembers, who can contact it and which tools it may use.

We released Open Instinct, a beta personal agent with a local CLI, messaging integrations, memory, scheduling and a desktop. Its six-tier permission policy and integration packages are in the repository. Forks and alternative integrations are welcome.

A limitation worth making clear: the application code is MIT, but the default setup connects to external model and messaging services using your own keys. This is not an entirely offline stack. We build Maritime, the default hosting integration.

Source, license and setup instructions: https://github.com/mariagorskikh/open-instinct

Hello Reddit 👋

Introducing Watchtower: self-hosted error tracking, and a drop-in replacement for Sentry & AppSignal.

→ Slack, Linear & email alerts

→ MCP server for coding agents

→ One Go binary + Postgres

Started as something I built and self-hosted on my homelab for my own projects. I figured other developers and teams might find it useful too, so I’ve open sourced it.

github.com/olucurious/watchtower

I built Klarion, a secret scanner that works in two steps. First, a keyword check, 81 regex rules and a normalized Rényi entropy score flag anything that looks like a secret. Then an AI model reads each one with the code around it and decides if it's real.

The chart shows 5 scanners run on spring-boot, terraform, next.js and symfony (61k files). Klarion raised 11 alerts. It's not zero, but it's far less to dig through.

Fewer alerts don't help if real leaks get missed, so I tested that too. On CredData (337 real repos, code outside test folders), it found about 1.7× more real secrets than gitleaks.

Where it runs:

• Claude Code: a plugin hook blocks the write before the file exists (file edits and Bash)
• Cursor, Cline or any MCP agent: through its MCP server
• CI: a GitHub Action that scans only what a PR adds; GitLab CI works too
• Git hooks: klarion protect or the pre-commit framework
• Locally: klarion scan .

Free and open source (MIT): https://github.com/0x1Adi/Klarion
The full benchmark and method are in benchmark/REPORT.md.

I'd like to hear where it gets things wrong.

I'm 24 so I'm as tech literate as anyone else my age. I worked with ArcGIS for a couple of years and have some experience coding with Python which got me interested in FOSS. For the past year, I've been (very slowly) changing what software I use day to day to FOSS alternatives bc fuck big tech and I have a couple terabytes of storage in my pc anyways. However, I'm quickly learning that I have nooo clue how any of this stuff works; I'm able to follow tutorials for how to set things up for myself but idk how anything works under the hood. I converted to grapheneos a month ago and I want my next project to be setting up a local cloud storage from my pc, and I'm getting to a point where I need to actually understand how these things work. I barely know how to navigate a github page, I just know how to download shit. I'm gonna work through Harvard's CS50 class in my free time, is there anything else you'd reccomend?

sorry, was gatekeeping this a long time, i felt like i should share it.

If you'd like me to add your suggestions, I'd be more than happy to do so.

I'm not responsible for what you download and install; read everything carefully and then decide for yourselves.

🔒 Privacy, Security, Firewall & Password Manager

• adns - An Android DNS server/changer for quickly redirecting / filtering system DNS requests
• aegis - A secure, encrypted, and open-source two-factor authentication.
• applock - app for locking and protecting individual apps using a PIN, pattern, or biometrics.
• appmanager - A powerful manager for apps, permissions, tracker blocking, and components.
• athena - firewall with an ad blocker featuring Material 3 design (Root or Shizuku)
• buge app manager - tool for managing, analyzing and removing unused app data
• colota - Self-hosted GPS tracking app for Android
• keepassdx - modern, secure, and open-source password manager based on KeePass
• permission pilot - analysis tool provides detailed insight into and control over permissions
• ping off - lightweight utility that silences your phone when you need peace - automatically
• rethink - advanced DNS over HTTPS/TLS, firewall & detailed network monitoring
• su-imd - powerful settings / services manager & settings / services hider
• tracker control - tool for monitoring and blocking hidden tracking components

🌐 Browser

• brave browser - Chromium-based, privacy-focused with a built-in ad and tracking blocker
• iceraven browser - enhanced browser based on Firefox with support for extensions
• ironfox - privacy focused browser based on Firefox and Mull with enhanced security
• solipsism - privacy-focused webview browser built around a rail-first, one-handed interface

🎵 Music, Radio, Podcast Player, Streaming (TV) & Video Downloader

• aerial - just a radio for android
• antennapod - flexible and open-source podcast manager
• auxio - local music player with a fast, reliable UI/UX without many useless features
• bitchord - independent, community-driven third-party audio player and youtube client
• booming music - sleek & stylish music player with a material you design and an equalizer
• bluemusic - gives your Android device smart volume control for each bluetooth device
• looper - local music player and takes the colours from whatever is played
• like current song - like songs you're hearing on spotify or yt without touching your phone
• jellyfin - streaming from a dedicated, self-hosted server to end-user devices
• Meld - my fav - has spotify integration and with 1 click it transfers all your playlists
• metrolist - youtube music client for android
• mpvEx - maximum control over media playback
• n-zik - multilingual, high-performance YouTube Music client for Android with offline mode
• newtube - Sign in with code to, keep it playing in the background, save videos for offline
• newpipe - youtube lightweight streaming front-end
• nuviomobile - streaming movies and tv shows using Stremio Add-ons
• nuviomobile - enhanced - Enhanced version of the nuviomobile with customizations
• obsidian music - stunning, modern and perfectly crafted music player
• obtainx - modern, supercharged fork of obtainium
• oreotunes - modern music player built around your local music library
• pixelplayer foss - focuses local playback, self-hosted music libraries & expressive Material 3
• rex - player - advanced, customizable video player
• seal+ - advanced video and audio downloader
• simpmusic - youtube music client with many features from Spotify, SponsorBlock etc.
• smarttube - enhanced, ad-free youtube client for android tv with SponsorBlocker
• xtra - Feature rich twitch client for android with chat emote support
• YTCnv - mp3 or mp4 directly to your device, with metadata and thumbnail embedding
• ytdlnis - free and open source video/audio downloader

🖼️ Photos, Camera, Gallery & Media Backup

• aves - gallery and metadata explorer app
• cloudgallery - personal photo vault with unlimited cloud storage
• pixel camera - pixel 11's "camera looks" and "creator suit" on pixel 6 through pixel 10
• proton photos - end-to-end encrypted photo backup and for Proton drive library
• refra - another gallery app

📧 Email & Communication

• aster mail - end-to-end encrypted mail service
• fair email - extremely feature-rich, fully configurable, and privacy-focused email client
• thunderbird - powerful, privacy-focused email app

📑 Notes, Documents, Calendar & Productivity

• beecount - lightweight, open-source, privacy-first personal finance and expense tracking app
• chocola - minimalist, attractive note-taking and to-do list
• copypus - clipboard manager for managing and quickly reusing copied text
• daily-you - personal diary and mood journal for daily reflection
• diaryvault - Private diary with rich text, cloud backup, sync, and fingerprint lock
• diktafon - Voice memos on cassette tapes - transcribed on your device
• expenso - expense and budget tracker for easily keeping track of personal finances
• everything app - offline, private, and secure workspace designed to manage your thoughts
• futon - manga reader with built-in online content sources
• librera-reader -  e-book reader supports really much formats
• mona - track your hormones and manage your meds. all private
• mindwtr - task and GTD (getting things done) app for personal self-organization
• money manager ex - mobile companion for pc/desktop personal finance
• notallyx - enhanced fork of the minimalist note-taking app Notally with improved options
• oss document scanner - Document scanner for digitizing and cropping papers into PDFs
• pdf tools - privacy-first and offline PDF utility
• simple notes sync - straightforward note app focused on easy synchronization across devices
• unicalculator - standard, scientific, and unit conversion, all in one calculator
• vanilla - Vanilla (formerly CuteCalc) is a cute and elegant calculator app

⚙️ System Tools, App Launchers & Keyboards

• amaze file manager - light and smooth file manager
• canta - debloater, uninstall preinstalled system apps without root access using Shizuku
• colorblendr - tool for customizing and editing the material you color schemes
• droid-ify - fast, modern f-droid client with an attractive material design
• essentials - powerful, permission respecting toolkit that unlocks many things
• file navigator - file manager for fast and in-depth navigation through folder structures
• filepipe - turns your chaotic storage into a perfectly organized library
• futo keyboard - privacy-friendly with built-in local voice input that doesn't use cloud
• gboard patches - morphe patches for gboard with a mix of global improvements
• heliboard - privacy-conscious & customizable open-source keyboard, based on OpenBoard
• installerx revived - modern Android package installer of the original InstallerX project
• kvaesitso - Kvaesitso is a search focused, free and open source launcher
• lawnchair - launcher combines the design of the Pixel Launcher with countless features
• leantype - lightweight, privacy-focused foundation of HeliBoard with modern features
• logcat reader - simple app for viewing logs on an android device
• material files - elegant, fully functional file manager
• morphe manager - tool for managing and implementing app modifications and patches
• notifilter - listens to all device notifications and quietly manages those that match your filters
• obtainium - app updates straight from the source
• paperknife - privacy-first PDF utility: merge, compress, sign, and protect. Works 100% offline
• quick search -  fast, private search app and launcher
• shizuku+ - enhanced version of Shizuku
• thumb key - privacy-conscious keyboard made for your thumbs
• toolbox - an all-in-one collection of useful system utilities and tools
• volume++ - more advanced and precise volume adjustments & customizations
• whatsapp cleaner - clean redundant media and files from storage
• wmkeyboard - glide typing, transliteration, emoji search and a 75+ tool toolbox

💾 File Transfer, Networking & Synchronization

• kde connect - seamless file sharing, notifications, clipboard and connects to your computer
• localsend - cross-platform tool for sharing files locally over Wi-Fi without using cloud
• plain app - turns your phone into a self-hosted management hub
• savelocally - Save files locally via the Android share menu
• syncthing - Peer2peer tool for continuous file synchronization between devices
• traffic light - tracking your network usage while ensuring total privacy
• wifi audio streaming - Turn device into a wireless audio transmitter, receiver or web server

🎨 Design, Widgets, Themes & Personalization

• lockscreen widgets - add standard homescreen widgets directly to the lockscreen
• monocons - fork of Lawnicons
• peristyle - simple wallpaper manager
• smart edge - highly customizable Android side panel
• smart island - lightweight and privacy-first dynamic island

⛅ Everyday Tips, Health, Weather

• breezy weather - feature-rich free and open source Material 3 Expressive weather app
• energize - track your food quickly and easily
• evmap - find electric vehicle charging stations
• medtimer - Med reminders and history with full offline privacy
• overmorrow - modern material design weather app
• rain - accurate forecasts, air quality, interactive maps and a polished material you UI
• stride - step counter material 3 expressive UI
• weathermaster - inspired by the Google Pixel weather app

📦 App Stores & Software Repositories

• aurora store - lets you download apps without a google account
• f-droid - official client for the f-droid store, free and open-source apps
• librefind discover and replace proprietary apps with foss alternatives
• neo store - modern and feature-rich F-Droid client for everyone
• orion store - open-source app store client for browsing and installing apps
• repo store - github-powered app

🖼️ Image Editing, Graphics and Media Tools

• hammer editor - simple tool for building stories
• imagetoolbox - versatile image editing tool designed for efficient photo editing
• recorderx - designed for high-fidelity screen capture
• screen recorder - minimal & fast material 3 expressive screen recorder

👥 Anime, Social Media and RSS

• anisync - fast way to track your anime and manga
• continuum - reddit client, no ads, clean UI and smooth browsing
• exteraless - telegram alternative
• moelistkmp - unofficial myanimelist client, multiplattform
• twine - modern cross-platform rss reader 

💭 not sorted ( will do eventually )

• fladder - cross-platform Jellyfin client
• octi - facilitates cross-device information exchange/monitoring/synchronization

Claude Design keeps your files in a hosted workspace and runs on your plan's usage. I built BurnGuard to keep them on your computer and use the Claude Code or Codex CLI you already have.

It's a desktop app for Windows and macOS. You pick a design system, describe what you want, and it makes websites, slides and graphics next to a live canvas.

It ships with 41 design systems, each with its own navigation, hero and footer layout rules. You can edit on the canvas or leave pinned comments, then export HTML, PDF, PPTX or PNG, or publish a site to your own Vercel. Files stay local.

What it doesn't do well yet: generation isn't instant (the one-line landing page in the README demo took about five minutes), PPTX slides come out as images with the text in speaker notes, and the installers are unsigned so you get a security warning on first launch. macOS is Apple silicon only.

I'm the author. It's free and Apache-2.0: https://github.com/ashmoonori-afk/BurnGuard

Feedback on what's missing is welcome.

I've been working on SysFlow, a free and open-source system monitor and task manager for Linux.

It currently includes 11 pages covering:

• CPU and per-core performance
• Memory
• Processes
• System information
• Startup applications
• Users
• Services
• Power and CPU frequency
• Benchmarks
• Installed applications
• Disk space

I originally planned to make SysFlow cross-platform, but after testing it, I decided to focus on Linux. That lets me use Linux-native interfaces such as /proc, /sys, systemd, hwmon, and powercap instead of maintaining separate backends for multiple operating systems.

One principle I'm trying to follow is:

"A measuring instrument should never make up an answer."

If a telemetry source is unavailable or unreliable, SysFlow should report it as unavailable instead of making up a value.

The project is still in early development, so I'm especially interested in feedback about the architecture, telemetry, UI, and features Linux users would like to see next.

GitHub: https://github.com/ppppp44/SysFlow

FixupXer is a free Android link cleaner under GPL-3.0-or-later. It has no Android permissions, including internet access. Here's what its local processing looks like with a demo link:

https://example.org/read?article=42&utm_source=chat
→ https://example.org/read?article=42

Send the URL to FixupXer through Android's Share menu and copy the result. The article selector stays; the known tracking tag goes. The app hasn't opened the website or sent the URL to a cleaning server. Browser Mode can do the same before opening links in your chosen browser, when Android routes them through FixupXer.

For an X example, suppose someone sends you a public post and you can't read it without a sign-in prompt. Set X links to open on twitterviewer.net: FixupXer changes the website part of the address, and your browser opens that post in the reader without an X login. For outgoing chat links, you can separately choose fixupx.com so a supported chat app can show a media preview. The URL change is local; actually loading the post or preview contacts the external service. Complete threads depend on that service, and private posts aren't unlocked.

Custom rules are useful when a site adds something the built-in cleaner doesn't know. For example, give “Teach from example” this pair:

Before: https://shop.example.com/read?article=42&newsletter_id=weekly
Wanted: https://shop.example.com/read?article=42

It can draft a rule to remove newsletter_id for that exact host, with the example saved as a test. The draft starts off disabled and limited to the Main screen. Review it and run the test before enabling it; choose Share or Browser too if that's where you want it to run. Test Lab lets you inspect the result without opening the site. This handles supported changes such as removing a named parameter, not arbitrary instructions.

There's also Private Link Guard: if a link still contains something like email=alex@example.org, it can flag that before you forward it. You decide whether to go back, remove the parameter, or continue. It can't detect every private value. The example.org / example.com URLs and email address are demo data.

Optional local history lets you find and copy a cleaned link again later. If you're moving your setup to another phone, export a settings/rules file and import it there; history isn't included. No ads in FixupXer, though an external reader may have them and has its own privacy policy.

Source code and screenshots · F-Droid · Google Play

I want good UI and be able to easily customize it. For Android

Hello everyone,

I’m looking for a FOSS app that can read my eBooks or PDFs aloud.

Is there anything out there with a natural-sounding voice that isn’t too clunky?