Show HN: An interactive map of hidden AI dev agent action paths
Action-path lab is an interactive map that visualizes how AI coding agents can create hidden risks through four stages: normal PR, hidden path, real exposure, and proof gap. It simulates the path from code assistance to action authority without requiring repo uploads.
Action-path lab
AI coding isn't the risk. Unmapped action paths are.
Start with a normal-looking PR. In four moves, Trace shows whether the path can reach workflow control, credentials, tools, deploy authority, and the proof trail your team would need after the action.
Normal signal Agent opens a PR
Useful, reviewable, and usually not the dangerous part.
Hidden path PR changes workflow, package, or tool config
Now the path can influence commands and tools that run somewhere else.
Real exposure Automation has credentials
That is where code assistance can become action authority.
Proof gap Proof is split across systems
The question becomes who approved what, with which credential, and what happened.
No repo access. No upload. This is a simulated control-path exercise.
Trace guide
Choose the normal-looking path. The graph will show where authority appears.
01 Signal 02 Agent 03 Surface 04 Proof
Agent label
Signal locked
Trace ready
Approval gap
Active path Review boundary Credentialed action Not selected
Next step
This was the simulated graph. Map one real workflow.
Bring one PR, workflow file, MCP config, package script, or release path. Clyra maps the action boundary, owner, credential scope, approval point, and proof trail without a repo upload to start.
Map one real workflow Read the graph guide