Open Source Radar — October 6: nothing leaves your machine

Today's trending board is all projects we ran earlier this week, so the fresh signal comes from the Product Hunt launch slate instead — three open-source tools that share one instinct: your phone, your pixels and your MCP traffic should stay on hardware you control. All three verified at the source.

iphone-use (Rust, MIT, about 59 stars) is computer-use for a real iPhone: an agent reads the screen as text, taps, swipes and types over WebDriverAgent, and every action comes back with an honest verdict — applied, sent but unconfirmed, or unknown — instead of silent success. That honesty is the point: apps with no API work, including payment apps that block screenshots (those come back as a wireframe), and a task you perform once can be saved as a flow that replays later with no model calls at all. It ships as an HTTP API plus an MCP server for Claude Code and other clients, launched on Product Hunt this week, and the catch is setup friction — macOS 15+, a USB-connected phone and a signed Xcode install before anything moves.

Scumble (JavaScript, GPL-3.0, about 63 stars) is a free desktop editor for AI inpainting: select part of a picture, say what belongs there, and the result lands as its own colour-matched layer you can mask, blend, filter and export — PSD export included — rather than a flattened overwrite of your file. What earns it a slot is where the models run: your own ComfyUI instance, local or remote, or API keys you already pay for (FLUX 3, GPT Image, Nano Banana, Seedream and more), with an MCP server so an agent can drive it too. It launched on Product Hunt this week and ships on Windows today; it's 0.1.x software, so keep backups of anything you care about.

mcpgawk (Python, Apache-2.0, brand new) attacks a supply-chain hole most agent setups ignore: an MCP server you approved can change what its tools do after the fact, and nothing in the protocol tells your agent. Mcpgawk sits in the path on your machine, takes a baseline of every server your agents can reach, checks each call against it, and blocks anything that drifted — nothing is uploaded. It launched on Product Hunt with a GitHub tag and already ships on PyPI plus VS Code, Cursor and GitHub Marketplace integrations; the free layer is the seeing and blocking, while fleet-wide enforcement and drift alerts sit behind a paid platform, so read the tier split before standardizing. Zero stars and days old — a watch-list entry, but the problem it names is real.

Worth watching this week.

Would you let an agent drive your payment apps if every action reported back honestly? Tell us in the comments.

Akhetonics says its all-optical CPU reaches a customer in 2026

Light-based computing keeps promising more than it delivers — but one Munich startup has just put a date on its bet, and the interview laying it out is doing the rounds on Hacker News this week. Akhetonics says it will deploy its first commercial machine with a major customer by the end of 2026, with several more planned for 2027. The company, founded by Michael Kissner and Leonardo Del Bino, is building a computer where data enters as light, is switched as light, and circulates through memory

The Week in AI — October 5–11, 2026

Every big claim this week turned out to rest on fine print more interesting than the headline: revenue only the company reporting it can define, safety tests sandboxed while the product keeps the web, and a Pentagon phase-out nobody would confirm until reporters kept asking. The week's top 5 1. OpenAI's revenue was $20 billion below the numbers everyone quoted — and the gap was definitional. The Financial Times reported Thursday that OpenAI's annualized revenue runs roughly $20 billion unde

Drone strike shuts a third Yandex data center, taking YandexGPT offline

Russia's largest tech company is learning what the AI era's infrastructure war looks like from the receiving end — three data centers in four days, and with them much of the cloud layer Russian businesses run on. A Ukrainian drone strike knocked out Yandex's data center in Vladimir early Sunday morning, the third of the company's facilities hit since October 8. The site — reported at roughly 50 MW and designed for about 2,880 server racks — stopped operating completely after the attack, Yandex

Agent teams cost up to 5x more, barely score higher

The multi-agent hype train hit a benchmark this weekend — and the grid and the trucking regulators had quiet weeks of their own. Vals AI put agent teams head-to-head with single agents on its Vibe Code Bench, and the teams cost between 1.8 and 5.1 times more for almost no extra quality. The evals company ran GPT-6 Sol and Claude Opus 5.5 solo and in teams across 50 apps at two reasoning efforts; out of four comparisons, only one was statistically significant — Sol at medium effort, where the t

Read more

Akhetonics says its all-optical CPU reaches a customer in 2026

The Week in AI — October 5–11, 2026

Drone strike shuts a third Yandex data center, taking YandexGPT offline

Agent teams cost up to 5x more, barely score higher