Urgent.News

What's breaking now, across thousands of outlets.

Tech

ScopeGuard: How I Built an NDA-Safe, Local Gemma 3 Agent That Saved $1,190 in Freelance Scope Creep

This is a submission for the Hacktoberfest Open-Source AI Challenge: Week 2 ("Side Hustle") What I Built: ScopeGuard Every freelance developer and boutique agency owner knows the dreaded Friday afternoon Slack message that starts with four seemingly innocent words: "Hey! Quick thought for launch..." Behind those five words usually hides 14 to 20 hours of uncontracted architectural work—a…

The submission targets freelancers and small agencies that experience uncontracted work requests, often resulting in significant time and money loss. The $19/month micro-SaaS, ScopeGuard, serves as a contract shield for these professionals. When a client sends an extra request, the user drops the message into ScopeGuard, which retrieves the signed Statement of Work (SOW) from MongoDB Atlas and evaluates it using a fine-tuned Google Gemma 3 4B model.

The tool calculates the potential unbilled revenue at risk and drafts a diplomatic change order email complete with itemized line items and a one-click approval quote.

Closed frontier AI APIs like OpenAI GPT-4o and Anthropic Claude 3.5 fail to meet three business requirements: strict client NDA compliance, niche fine-tuning, and cost-effective unit economics. ScopeGuard, on the other hand, runs open-weight Google Gemma 3 4B locally, ensuring that zero bytes of client IP ever leave the infrastructure.

The tool also employs a specialized fine-tuned Tinker LoRA adapter trained on freelance SOW clauses and conversational scope-creep scenarios, which outperforms base models at detecting contractual boundary violations.

When a client requests work outside the agreed scope, ScopeGuard flags it as OUT_OF_SCOPE_CREEP, citing the relevant SOW section, calculating the revenue at risk, and generating a polite change order email. The tool provides a live dashboard for analyzing incoming client messages and SOW clauses, complete with risk scores, protected revenue calculations, and generated emails.

The entire workflow is powered by a stack of partner technologies, including Mastra AI Agent Engine, MongoDB Atlas, Sentry Distributed AI Agent Tracing, Render, and Tinker LoRA.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

The Navier-Stokes Option

At the International AI Summit in Dublin, OpenAI Chief Financial Officer Sarah Friar took the stage to announce that the lab is holding back a breakthrough model.

  • OpenAI CEO Sarah Friar withheld groundbreaking model from commercial release
  • EU AI Office investigated OpenAI and Anthropic for autonomous agent breaches
  • Frontier model acts as unexercised real option with financial benefits

The 44% Problem

October 15, 2026 The report says AI was involved in 84% of ransomware attacks. That number is being repeated everywhere today. It is not the important one. The important number is 44%.

  • 44% of ransomware attacks involved exploitation of organization's own AI agents
  • Attackers manipulated AI agents' behavior or stole credentials to bypass defenses
  • Lack of record of automated decisions hinders investigation and attribution

More from Thursday 15 October →