PhD student at Beijing Jiaotong University, working on LLM security and agent harnesses: how an agent system tells the model who said what, and what breaks when it cannot. I also shoot medium-format film, study mathematics, and write about the systems that shape learning and everyday life.
北京交通大学博士生，做 LLM 安全与 agent harness：系统怎样告诉模型「这段话是谁说的」，这件事失灵时会发生什么。也拍中画幅胶片、学数学，记录技术、学习与日常生活里的系统性问题。
| 🔬 Researching | Provenance inside the context window. A model decides whom to trust with two systems: role tokens it cannot forge but that only split mine from theirs, and text shapes it learned from harnesses in post‑training, fine‑grained but forgeable by anyone. Prompt injection lives in the gap between them. Probing this on open weights of DeepSeek V4.1 Flash: does a role header change what the model reads, and is a successful injection always one that got selected? |
| ✍️ Writing | A position paper arguing the agent harness does not disappear under scaling, it shrinks to a kernel: four operations on context structure (execute, cut, fork, partition) and not one line of prompt. Everything a harness does by saying gets absorbed into the weights; what it does by placing cannot be. |
| 🚢 Shipping | DSCodex v1.2.1, a local router that puts DeepSeek V4.1 Flash into the stock Codex / ChatGPT desktop app. A macOS Dock‑reopen fix merged upstream into tty7. |
| 📷 Elsewhere | Film scans going up at portfolio.fish2lab.com; a Touhou fan‑game side project about a perishable flow and four storable stocks. |
DSCodex
 DeepSeek V4.1 Flash inside the unmodified ChatGPT desktop app, Codex CLI and IDE. Local loopback router, native Responses API, full tool loops, GPT OAuth kept side by side. No fork, no patch. 在原版 Codex / ChatGPT 桌面端同时使用 DeepSeek 与 GPT。 JavaScript · MIT
|
tty7
 A pure‑Rust terminal workbench on Zed's gpui with persistent sessions and coding‑agent awareness. My contribution answers the macOS Dock's reopen event, so a tty7 whose last window was closed comes back instead of staying retired. 给 tty7 补上 macOS Dock 重新打开窗口的行为。 Rust
|
|
bjtu-cli · BJTUselfService‑macOS The campus MIS, AA and course platforms as a command‑line client built for coding agents to drive, and as a native SwiftUI app with Liquid Glass and course grabbing. 北交大校园系统的 CLI 与 macOS 原生版。 Swift
|
sukima-ml Website for 隙间月影 Sukima Moonlight, a doujin circle pairing classic paintings with Touhou Project. Dual‑frame gallery, a Galgame‑style guide, museum‑grade CSS matting. 名画与东方 Project 的邂逅。 TypeScript · Docusaurus
|
Upstream · typex-ink/Typex #2 adds Xiaomi MiMo ASR and explicit hotkey trigger modes.
|
Portfolio · 作品集 Medium‑format documentary, landscape, street and conceptual series. portfolio.fish2lab.com → |
Research · 研究 Field notes, probes and work in progress on LLM security and agent systems. research.fish2lab.com → |
Blog · 文章 Essays on cognitive science, learning, health and everyday systems. blog.fish2lab.com → |
闲来垂钓碧溪上，忽复乘舟梦日边