Axolotl v0.16 vs CrabTrap

Axolotl is the go-to open-source fine-tuning framework for the local LLM community, and v0.16 is its most significant performance release to date. The headline numbers are striking: 15x faster training for Mixture-of-Experts (MoE) models with LoRA adapters, 40x reduction in memory usage for the same configurations, and 58% faster GRPO async training — the algorithm behind many of the recent reasoning model breakthroughs. Day-0 support for Google Gemma 4 shipped simultaneously with the model release. The MoE+LoRA improvements are especially timely. As sparse mixture-of-experts models like Gemma 4, Mistral, and Qwen3.6-Plus dominate the model landscape, fine-tuning them has been disproportionately expensive. Axolotl v0.16 makes it practical to fine-tune these architectures on a single consumer GPU — previously a multi-GPU or cloud-required task. The GRPO improvements also make reinforcement learning from human feedback (RLHF) workflows dramatically faster for small teams. For the indie fine-tuning community — researchers, small companies, and hobbyists building specialized models — this release removes a major cost barrier. Combined with the simultaneous Gemma 4 support, v0.16 positions Axolotl as the fastest path from a new model release to a fine-tuned, production-ready custom variant.

CrabTrap is an open-source HTTP/HTTPS proxy built by Brex's engineering team that sits between AI agents and the external internet, evaluating every outbound request against configurable security policies before it reaches any third-party API. It uses a two-tier evaluation system: fast deterministic static rules handle the obvious cases (block this domain, require this header), while an LLM-as-a-judge handles ambiguous requests that need semantic understanding — like determining whether a request to send an email is within scope of the current task. Built in Go with a TypeScript frontend, CrabTrap ships with a PostgreSQL-backed audit log and a web UI for policy management. It supports MITM inspection of HTTPS traffic, request/response logging, and policy versioning — making it suitable for production agentic systems where compliance or security teams need a paper trail. Version 0.0.1 was released April 17, 2026 and is MIT licensed. The problem it solves is real: as AI agents gain more autonomy and access to external APIs, the attack surface grows. A compromised or misbehaving agent that can freely call any URL is a significant risk. CrabTrap gives engineering teams a single chokepoint to enforce least-privilege access — something that's been missing from most agentic frameworks that assume a trusted execution environment.