{"slug": "alone-at-midnight-i-sent-an-ai-to-fix-the-software-the-world-runs-on", "title": "Alone at Midnight, I Sent an AI to Fix the Software the World Runs On", "summary": "A developer built Jeffy Loop, an open-source control loop for Claude Code that audits codebases, generates fixes, and verifies them with adversarial checks and a shell gate before anything is pushed. The loop has produced 57 accepted patches across 45 projects, including Google's snappy compression library, NVIDIA, Meta, Tesla, and the URL parser in Node.js, with 103 of 132 unrelated open-source projects running to convergence across 13 languages. The developer also published housebroken-cli on PyPI, encoding rules derived from real maintainer verdicts, after a maintainer rejected a finding backed only by a measurement.", "body_md": "At 12:03 AM on September 6, I filed a pull request against Google's snappy compression library. The bug inside it was almost absurd. Compress a 4 GiB file with any release build, and the header it wrote swore the file held 0 bytes. A machine I built called Jeffy Loop had found it that night. I was about to ask Google to believe my machine.\n\nThe maintainer merged it the next day. Since then Jeffy Loop has put its work into code owned by NVIDIA, Meta, Tesla, Google, Apple, Microsoft, Netflix, Apache, Oracle, IBM, Cisco, Square, Cloudflare, JetBrains, Canonical and the URL parser inside Node.js. That comes to 57 patches across 45 projects, every one written by the loop and every one accepted by a stranger who owed me nothing. It was one person, at night, betting that a machine held to evidence could find what busy people miss.\n\nThink about what sits underneath every app you touched today. Compression libraries. Memory allocators. The URL parser inside Node.js. A Rust UUID library with 192 million downloads in the last 90 days. Much of it is kept alive by small teams of software engineers working together to maintain the integrity of the repo.\n\nImagine AI that could be trusted to find real defects in that layer and fix them properly. Every piece of software stacked on top would get better at once. That would be one of the largest quiet upgrades in the history of computing.\n\nNobody had earned that trust. AI agents made it cheap to break every rule of a good pull request at once, on a hundred repositories, before breakfast. So maintainers learned to close them without reading them, and they were right to.\n\nI wanted to earn it anyway, one merge at a time, from people with every reason to say no to someone like me.\n\nI built Jeffy Loop as an open-source control loop for Claude Code. It audits a codebase, attacks what it finds, fixes it, and proves the fix with a check that can fail. Every iteration is a local commit. A broken verify gets reverted. Nothing is ever pushed.\n\nThe heart of it is that the agent never gets the last word. An adversarial evaluator and a shell gate re-check every claim that the work is done. On one build that evaluator was called 8 times and rejected 7. And the final verdict sits entirely outside my reach. A merged pull request is the one result the loop cannot award itself.\n\nThen I pointed it at the world. 132 open-source projects with no connection to me, each judged by its own test suite. 103 of them run to convergence across 13 languages, with no language-specific analyzer anywhere in the engine.\n\nEvery patch leaves my machine through a set of rules I built called housebroken, published on PyPI as housebroken-cli. Every rule in it came from a maintainer's verdict on a real pull request.\n\nOne maintainer asked the question that every AI patch should have to survive: \"Is there any actual bug here? Either a security issue where we read out-of-bounds, or a case where we claimed to succeed but returned incorrect output?\" I had a measurement and no broken output. I conceded. He closed it with one line: \"Closing - no user-visible bug.\" He was right, and from that day a finding backed only by a measurement never leaves my machine.\n\nNVIDIA's contributing guide says: \"You must use your real name (sorry, no pseudonyms or anonymous contributions).\" The loop had found a buffer allocated with zero bytes that the library then wrote a directory path into, crashing the process. A machine wrote that fix. NVIDIA wanted a human name standing behind it, and a signed commit to prove it. I put mine there. They merged it 12 days after I filed.\n\nThen came the review that could have ended it.\n\nAn Apache Commons maintainer, reading a reflection fix the loop wrote for commons-lang, converted it to a draft and wrote: \"I think this PR creates 2 bugs so it looks like we are missing some tests since the build was green.\" Then: \"Your AI is imagining things when it talks about PR #1427 because that PR was closed without being merged.\"\n\nHe was right on both counts. The fix had introduced two bugs the green build never caught. The description had borrowed its history from a summary table instead of the code's own record.\n\nEvery skeptic of AI coding would have been vindicated in that one comment. I went to work. Each case he raised was reproduced, fixed and covered by a test. He raised a third. It got the same treatment. On September 9 he merged the third rework. And the mistake became machinery: history in a pull request now comes from git blame, never from a table.\n\nThat is the engine of the whole project. Every closure that was my mistake was a mistake of reading, and every one became a gate that reads for you.\n\nAt NVIDIA, an empty setting in a config file passed validation, and a container started with no GPU access and no error. At Netflix, every query parameter with an uppercase letter in its name came back empty. At Tesla, a proxy read every request body with no size limit. At Meta, StyleX emitted every declaration twice. At Microsoft, an allocator that promised zeroed memory handed back uninitialized memory, and the library's own author merged the fix.\n\nThe URL parser inside Node.js took the loop's fix twelve minutes after it was opened. Microsoft's snmalloc went from filed at 2:12 PM to merged at 4:05 PM, with two words. An Apache maintainer asked for four more test cases, and sixteen seconds after CI passed on them he wrote \"looks good, merged.\"\n\nAnd I published every loss beside those wins. 28 projects failed. mruby took 10 runs and 113 iterations and never converged. It sits in the same public scorecard as the merges, because a record that hides its losses deserves no one's trust.\n\nI believe this is where software is going. Agents will write a growing share of the world's code. The ones worth trusting will carry their evidence with them, prove their fixes red then green, learn from every rejection, and hand the final verdict to someone who owes them nothing.\n\nIt is buildable now. One person proved it at night in their spare time. Jeffy Loop is open source under the MIT license, and it installs with one command.\n\nCome knock on that door with me. Bring evidence.\n\n**Jeffy Loop:** [github.com/lenamonj/jeffy-loop](https://github.com/lenamonj/jeffy-loop), `pip install jeffy-loop`. The receipts, every merged patch with its link, are on [the receipts page](https://github.com/lenamonj/jeffy-loop/blob/main/evals/README.md).\n\n**housebroken:** [github.com/lenamonj/housebroken](https://github.com/lenamonj/housebroken), `pip install housebroken-cli`.", "url": "https://wpnews.pro/news/alone-at-midnight-i-sent-an-ai-to-fix-the-software-the-world-runs-on", "canonical_source": "https://dev.to/lenamonj/alone-at-midnight-i-sent-an-ai-to-fix-the-software-the-world-runs-on-c38", "published_at": "2026-09-27 14:44:54+00:00", "updated_at": "2026-09-27 15:01:08.774570+00:00", "lang": "en", "topics": ["ai-agents", "ai-tools", "developer-tools", "artificial-intelligence", "mlops"], "entities": ["Jeffy Loop", "Claude Code", "Google", "NVIDIA", "Meta", "Node.js", "Apache Commons", "housebroken-cli"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/alone-at-midnight-i-sent-an-ai-to-fix-the-software-the-world-runs-on", "markdown": "https://wpnews.pro/news/alone-at-midnight-i-sent-an-ai-to-fix-the-software-the-world-runs-on.md", "text": "https://wpnews.pro/news/alone-at-midnight-i-sent-an-ai-to-fix-the-software-the-world-runs-on.txt", "jsonld": "https://wpnews.pro/news/alone-at-midnight-i-sent-an-ai-to-fix-the-software-the-world-runs-on.jsonld"}}