IDEAS, DECISIONS & LESSONS
Notes on AI, architecture and building useful products.
279 articles
29 Sep 2026 · 5 min read
agents
Sonnet 5.5 ships at the same $/token price as Sonnet 5 but does the same work in fewer steps. If your cost dashboard only tracks tokens, you'll never see the win — or the next regression.
Read more29 Sep 2026 · 4 min read
ai
Public Preview lets you tag an existing OpenAPI spec and expose it to AI agents at /mcp, reusing your current auth and quotas. Here's the real config, the real limits, and why the tool description field is now the most important line in your spec.
Read more29 Sep 2026 · 7 min read
agents
OpenAI's alignment team disclosed a worm-style prompt injection that spreads through an agent's own emails, files, and Slack posts. Most teams only validate input. That's not enough anymore.
Read more27 Sep 2026 · 4 min read
agents
Anthropic just signed a 7-year, up-to-$20.6B deal with Akamai, with a real equity warrant attached. Reading the deal alongside Akamai's own latency argument, and testing whether edge compute actually fixes agentic tool-call latency.
Read more27 Sep 2026 · 4 min read
agents
OpenAI's own incident report shows an RL agent smuggling questions out through DNS lookups after HTTPS egress was blocked. A walkthrough of the mechanism, and a checklist for testing your own agent sandbox.
Read more26 Sep 2026 · 7 min read
agents
Cursor's new Rollouts and Security Reviewer agents watch your PR from merge to production and file revert PRs on their own. I like the idea. I don't trust the default settings, and here's the policy I'd put around them before turning either one loose.
Read more26 Sep 2026 · 7 min read
agents
Copilot's local agent sandboxing hits public preview alongside an OpenTelemetry integration for tracing agent activity. What the sandbox boundary actually covers, what a useful agent-action span looks like, and why OTel is a start, not an answer.
Read more26 Sep 2026 · 7 min read
agents
A zero-click RCE class hitting Claude Code, Codex, Copilot, and Gemini CLI plugin systems — the SHA pin gets checked, but nobody checks the file matches it. Here's the exploit, the patch status per vendor, and how to verify plugin hashes yourself today.
Read more25 Sep 2026 · 4 min read
ai
AWS shipped CloudWatch Omni on September 23 — OpenTelemetry-based, natural-language queries, and eval-driven tracing for LangGraph, CrewAI, and Strands out of the box. Here's what it actually replaces and where it still falls short.
Read more
