Search
Posts
Run the Readiness Audit Before You Flip DNS
An adversarial readiness audit found a payment-path bug that would have charged every customer, then returned HTTP 500 — before the irreversible DNS flip.
ReadRent the Agent, Own the Proof
Anthropic's Claude Tag is the best agentic teammate you can rent. The question it doesn't answer: who owns the memory, and who can verify the audit log? Here's what customer-owned, verifiable agent governance looks like in code.
ReadGate the Statement, Not the Tool Name
When one MCP tool carries every SQL verb, allowlisting tool names is theater. The safety boundary has to read the statement — here's how that gate was built.
ReadCoverage Said 69%, Mutation Testing Said 25%
A repo at 69% line coverage scored 24.88% on mutation testing—and the rules engine that touches user email scored 0.00%. Coverage said fine; Stryker didn't.
ReadWhen LLM Output Lies Instead of Crashing
An LLM-output parsing bug silently understated a cost report via case-sensitivity. One-line normalizer fix plus 5 defensive hardening steps.
ReadThe LLM Should Never Do the Math
A Claude Code skill that hunts Databricks cost leaks and reports confirmed dollars from the customer's own billing tables — never LLM estimates.
ReadA Denial You Can Audit Beats a Silent Drop
The governed second brain shipped: one plugin, two modes, and a governor that hands back a receipt when it refuses a write instead of dropping it silently.
ReadA Reply Your Bot Loses to a Crash Is One Your User Never Got
Making every bot reply path — streaming and file-upload — crash-durable. The unglamorous reliability work that separates a demo bot from one people depend on.
ReadN Bots in One Slack Channel Loop Forever: Three Gates
Put N AI agents in one Slack channel and, left ungated, they answer each other forever. The three moves that make a shared multi-agent channel safe.
ReadNo-Toggle Test: Make 'Not Built Yet' an Enforced Invariant
Shipping single-tenant first is sound—but 'we haven't built multi-tenancy yet' rots as a comment. A static no-toggle test makes it an enforced invariant.
Read