A Scared Team Is Your Biggest Attack Surface
A scared employee hands over access to avoid a manager's wrath, the exact move social engineering exploits. Why psychological safety is a security control.
Writing, page 8 of 12
All 138 posts, newest first. The latest are on page 1, and the topic directory groups them by subject.
What Cyber Insurance Underwriters Ask AI Startups
The cyber insurance application is a security audit in disguise. What underwriters check in 2026, the AI exclusions creeping in, and when coverage is real.
Build an MCP Server in Phoenix With Hermes
An MCP server lets Claude and other agents call your Phoenix app directly. How to ship one with Hermes: auth, transport, and safe tool boundaries.
AIOS: An AI Operating System in Plain Markdown
I open-sourced the AI operating system I run daily: a git-versioned markdown vault, cross-repo wiring, and a nightly ingest loop. Fifteen minutes to set up.
What an AI Agent Postmortem Should Contain
Classic SRE postmortems can't explain agent incidents. The sections to add (decision-time context, autonomy rung, permissions delta), with a template.
Why Auto-Filled Security Questionnaires Kill AI Deals
Why auto-filling an enterprise security questionnaire backfires on an AI startup: the answers that kill deals, and the questions your SOC 2 won't cover.
Building an AI Memory That Outlives Any Single Agent
Your accumulated agent memory is a bet on one vendor's format. Build a portable, git-versioned knowledge layer any agent can read instead.
The Claude Code Plugin Stack I Actually Run
The Claude Code plugins that earn a permanent slot in my stack, sorted by what they actually change: my process, my domain expertise, or just friction.
4,154 Commits in Six Months With AI Agents
I shipped more code in 2026 than the previous four years combined. The commits are real. The productivity is real. What I lost is harder to measure.
Programming Sucks, Now With Agents
An homage to Peter Welch's Programming Sucks, updated for agents: a genius intern with amnesia, hallucinated packages, and a closet that eats your auth layer.
Prompt Injection Defense for a 5-Person AI Startup
Prompt injection defense a five-person team can ship in a week: trust boundaries, least-privilege tools, approval gates, and what not to build yet.
Oban as a Durable AI Agent Runtime in Elixir
Most AI agent frameworks reinvent a job queue badly. Oban already is one: durable, idempotent, retry-aware. Run an agent loop that survives a deploy mid-run.