{"type":"video","version":"1.0","html":"<iframe src=\"https://www.loom.com/embed/7862d9947fbc4135ac299d23f08cb37e\" frameborder=\"0\" width=\"3340\" height=\"2505\" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>","height":2505,"width":3340,"provider_name":"Loom","provider_url":"https://www.loom.com","thumbnail_height":2505,"thumbnail_width":3340,"thumbnail_url":"https://cdn.loom.com/sessions/thumbnails/7862d9947fbc4135ac299d23f08cb37e-d528c472f977e6f0.gif","duration":180.114,"title":"Don't Take Your Coding Agent's Word for It — Meta Hackathon Demo","description":"This Loom explains Bitness, a recorder and verifier that detects spoofed tool calls and serious breaches in coding agents. It describes a simulated attack against Meta’s Muse code agent using a decoy token from a fake service, where Bitness watches externally, saves the token to disk, and stops the run based on a stop rule. It also covers Muse Spark 1.3 and Muse Glimmer 30B recording and replaying real calls with deterministic rechecks, producing plain-English advisory outputs. Finally, it notes verification can fail in milliseconds when a signed receipt field is altered, and that the system uses multiple local and MCP read-only tools to enforce signed verdicts."}