#124

Mistral's 3B guard ships as 4B params, and a 483 point Show HN had no license

Mistral shipped Shieldstral under Apache 2.0 and 16GB of VRAM, then published the table where a 20B rival wins every refusal row. A 483 point repo had no license.

Listen to this edition

Mistral just handed the whole moderation layer to anyone who can spare 16GB of VRAM. Shieldstral shipped August 4 under Apache 2.0, one vllm command, no cluster. Then Mistral published the table where GPT-OSS-Safeguard-20B, the rival it measures itself against, wins all three refusal rows.

Shieldstral is the third moderation model in Mistral’s docs, after Moderation 24-11 and Moderation 2 26-03. It is the first of the three with open weights, image support, and a policy you rewrite as plain language.

In today’s indie hacker news:

  • 🛡️ Mistral open sourced its multimodal moderation model
  • 🎨 483 point Show HN shipped with no license
  • 🐈 A browser pet posted before any code exists
  • 📅 A when2meet challenger asks an answered question
  • 🚗 Waymo opens Dallas, Munich pays for libexpat
  • 🧰 Eight myths about GenAI and software engineering

TOP STORIES

THE BOUNCER YOU CAN SELF HOST

🛡️ Mistral’s Shieldstral turns moderation into one plain language yes or no question

Mistral's Shieldstral turns moderation into one plain language yes or no question

The story: Mistral released Shieldstral 1.0 on August 4. It is a policy adaptive multimodal safety classifier built on Ministral-3-3B-Base with a Pixtral vision encoder. You write the policy as a plain language question at deploy time. Then you hand it a prompt, a response, or an image, and it answers yes or no.

The model card shows the plumbing: max_tokens 1, temperature 0, logprobs on. A softmax over the yes and no tokens gives you a score, thresholded at 0.5 by default. That is what makes it cheap to run and awkward to explain. Commenter sbinnee named the catch on Hacker News: probabilities come back, reasoning traces do not.

The details:

  • The branding does not match the card: Mistral’s docs list 3.8B parameters where Hugging Face reports 4B, both for the checkpoint marketed as 3B.
  • Images are where it actually wins: 97.7 F1 on VLGuard against 88.5 for OmniGuard-7B, a model more than twice its size.
  • Multilingual is where it loses: 70.3 F1 on RTP-LX Prompt against 86.1 for the 4B Nemotron content safety model.
  • One policy, one forward pass: the card tells you to ask one question per query, so a ten policy taxonomy costs ten calls per item. The fallback is a single broad unsafe question that throws away the per policy verdict.
  • Attention is running ahead of installs: the Hugging Face repo shows 166 downloads last month against 341 points on Hacker News in 11 hours.

Why builders care: Owning the moderation layer is now a weekend of plumbing, not a vendor contract. The appeals flow, the audit log, and the “why was this removed” answer are still yours to build.

The demand side shows up in Trending today, where Interpol puts a number on AI driven scams.

483 POINTS, ZERO LICENSE

🎨 A skin tone color space hit the front page without a LICENSE file

A skin tone color space hit the front page without a LICENSE file

The story: The writeup builds a color space for skin tones out of hand labeled RGB swatches. Then a three component PCA, then equations fitted by eye in Desmos 3D. The author’s own warning: “There is no regression here, I literally did guess and check and eyeballed the function fit.” The Show HN took 483 points and 90 comments in about 13 hours.

The three axes fell out of the math, not a design meeting. The author says he only learned what they controlled after building the picker. The repo, meanwhile, carried nothing about reuse. Commenter rrradical asked whether the code was usable or educational only. The MIT LICENSE commit on the repo is dated Aug 4, the same day as the thread.

The details:

  • Three lines of arithmetic per channel: a weighted sum of three axes plus a constant, no library at all. Portable to any language in an afternoon.
  • One knob spans the whole range: R squared at 1.0 is the floor for decent variety, 1.5 keeps realism, and 2.0 tips into cartoonish outliers.
  • Coverage got a real critique: commenter dofm said the 1.5 setting missed indigenous Australian, Masai and some Somali tones. Those looked better represented by the 2.0 outliers.
  • Dark mode extensions broke the demo: several readers thought the palette was busted, and the author replied he had not considered that failure mode.
  • The ceiling here is real: Oklab began as one unpaid 2020 side project. It now ships inside Photoshop, CSS Color Level 4 and 5, Unity and Godot.

Why builders care: Anyone who wanted this inside a character creator had to decide during the traffic spike. Nothing on the repo answered them, and the front page day converted into 15 stars and one fork.

THE THREAD WROTE THE ROADMAP

🐈 A browser pet with no repo got its feature list crowdsourced in one thread

A browser pet with no repo got its feature list crowdsourced in one thread

The story: A post to r/SideProject asks what a tiny creature living inside your browser should do. It carries no repo, no demo and no store link. The maker describes a pet called Tabi. It chases the cursor, hides in empty tabs, and panics at loud notifications. The whole product surface is three sentences of described behavior.

It worked anyway. The thread handed back stale tab rescue, which two commenters arrived at independently. Then hydration nudges on uptime intervals with a 5 minute snooze, and a doomscroll interrupt. Major-Masterpiece282 wrote a full user story into the comments: a founder with ADHD who wants help with time blindness and a reward for returning to the work tab.

The details:

  • Nobody in the thread named a competitor: the reference points were Clippy and early 2000s desktop pets, not anything currently shipping.
  • Arcrawls already shipped this: it went from first commit on Jun 12 to a Chrome Web Store listing with 140+ animations by Aug 4.
  • The free version has been sitting there since 2022: oneko.js is one script tag, MIT licensed, at 1.3k stars and 125 forks.
  • The napping behavior shipped in 1989: per Wikipedia, Neko reached the Macintosh that year as a desk accessory, yawn and all.
  • The maker already drew the product line: Tabi “still needs to be a live companion, not a productivity app.” Soft skills only, like reminding you to take a break.

Why builders care: Posting the question before the code exists is the cheapest demand test on the board. What a comment thread will never tell you is which competitor already has a store listing.

THE ANSWER SHIPPED IN 2024

📅 A when2meet challenger asked Reddit what three older threads already answered

A when2meet challenger asked Reddit what three older threads already answered

The story: Venn Poll went up on r/SideProject with two questions attached. Where does the poll builder lose you, and is the when2meet moat of free plus habit unbeatable. The bet is modern UI, mobile friendly, no account required, optional auto generated titles, and some SEO.

That experiment already ran twice in public. WAYF took 122 points on Jan 30, 2024 on the identical no login pitch. Commenters named six free alternatives within hours. Whenish took 40 points on May 22, 2025 and stalled on install friction. Rallly, the category’s biggest open source entrant at 5.2k stars, is where the arc ends up.

The details:

  • Mobile is the one axis a challenger actually won: commenter _z2co said WAYF had much better mobile support than when2meet, which is the same bet here.
  • Time of day was the most requested gap: six separate WAYF thread commenters asked for times on top of dates, one with timezone handling.
  • Zero install is a real objection: commenter awill said a once a year user will not download an app, and that is what stalled Whenish.
  • Rallly tested the price and split the room: a $299 perpetual self hosted license drew 7 thumbs up against 8 thumbs down.
  • The moat is frequency, not habit: commenter david-uhlig’s non profit runs a poll at most a couple of times a year. No payment habit forms.

Why builders care: Every switch trigger in this category is already written down by strangers in dated public threads. The unasked question is who runs a poll every week instead of every year.

FIRST DOLLAR

SIX MONTHS AGAINST TWO GIANTS

🛒 A solo founder’s six month retro on an EU marketplace listing SaaS

Level-Ad-4878 picked European marketplace listing in Feb 2026, against BaseLinker at 30,000 customers and Channable at 12,000. The wedge was setup pain. BaseLinker needs a week of category mapping. Channable prices per SKU variant, so an apparel catalog passes €300 a month before a second channel.

TWENTY BUCKS A SWING

⛳ The $20 golf challenge someone says prints hundreds of thousands a year

Maximum-Trade-580 broke down the Lake Taupō Hole In One Challenge in New Zealand. Pay $20 to $25 for a bucket of balls. Land a hole in one on a floating green, win $10,000. The revenue claim is secondhand, so treat it as a napkin sketch rather than a filing.

DRAMA

LITIGATING IN BLOG POSTS

🍎 OpenAI published its side of the Apple lawsuit

OpenAI posted a response calling Apple’s suit baseless and correcting claims about its employees. It also published messages it says document what happened.

Why builders care: Nothing here moves your roadmap this week. It does set the tone between the two companies that own most of the distribution for anything you ship.

STACK OF THE DAY

🧰 Eight myths about GenAI, checked one at a time

Eight Myths on Software Engineering and GenAI is ACM Queue’s pass through what generative AI does to delivery. It picked up 110 points and 72 comments on Hacker News. Keep it for the next planning argument about how much of the estimate the model is supposed to absorb.

Not sponsored. We just feature tools builders would actually use.

BOOKMARKED TODAY

See you tomorrow. Hit reply and tell me what you shipped this week.

Curated by AI, built by a human.