Search
Posts
N Bots in One Slack Channel Loop Forever: Three Gates
Put N AI agents in one Slack channel and, left ungated, they answer each other forever. The three moves that make a shared multi-agent channel safe.
ReadNo-Toggle Test: Make 'Not Built Yet' an Enforced Invariant
Shipping single-tenant first is sound—but 'we haven't built multi-tenancy yet' rots as a comment. A static no-toggle test makes it an enforced invariant.
ReadVerified Identity for AI Agents: Off, Warn, Enforce
Give AI agents an Ed25519 verified identity, then roll out an off/warn/enforce daemon gate that refuses to act on an unverified one — like an unsigned commit.
ReadThe Merge Is the Trust Boundary: Re-Derive as Untrusted
In a multi-writer knowledge store the merge is the trust boundary: re-derive the union as untrusted, re-govern from scratch, and anchor it with a signed DAG.
ReadReject PII at the Source: A Disclosure Gate at Intake
The cheapest place to enforce a privacy rule is the front door — a fail-closed disclosure gate that rejects comp data and PII at candidate intake.
ReadAn Agent Allowlist Is a Comment Until a Gate Checks the Body
A Claude Code agent's tools list is a runtime gate, not a comment. A body-vs-allowlist consistency check in CI took 317 agents to A-grade in one sweep.
ReadBM25 Before Vectors: An Eval-Gated Retrieval ADR
Why ship BM25 search now and gate vectors behind an eval set? An ADR naming the trigger before a 333MB embedding model creeps into a local-first plugin.
ReadA Second Brain You Can Audit Beats One You Must Trust
A second brain you can audit beats one you must trust. Local-first, daemon-free, no-egress by default, and an external anchor that detects a silent rewrite.
ReadShipping Is Not Building: A Sunday of Merges
A quiet Sunday with no new code—just four PR merges that landed the intent-brain marketplace and cited search built across the prior week.
ReadYour System-Map Is Fiction Until You Diff It Against Live Infra
A system-map that isn't verified against live infrastructure is fiction. The day you decommission a service is the day to reconcile the docs against the live Caddyfile.
Read