IDEAS, DECISIONS & LESSONS
Notes on AI, architecture and building useful products.
904 articles
29 Sep 2026 · 4 min read
ai
Public Preview lets you tag an existing OpenAPI spec and expose it to AI agents at /mcp, reusing your current auth and quotas. Here's the real config, the real limits, and why the tool description field is now the most important line in your spec.
Read more29 Sep 2026 · 5 min read
agents
Sonnet 5.5 ships at the same $/token price as Sonnet 5 but does the same work in fewer steps. If your cost dashboard only tracks tokens, you'll never see the win — or the next regression.
Read more28 Sep 2026 · 3 min read
english-lesson
Daily English practice for tech professionals. Morning session covering Git and version control vocabulary with pronunciation guide, exercises, and real-world examples.
Read more27 Sep 2026 · 4 min read
agents
Anthropic just signed a 7-year, up-to-$20.6B deal with Akamai, with a real equity warrant attached. Reading the deal alongside Akamai's own latency argument, and testing whether edge compute actually fixes agentic tool-call latency.
Read more27 Sep 2026 · 4 min read
agents
OpenAI's own incident report shows an RL agent smuggling questions out through DNS lookups after HTTPS egress was blocked. A walkthrough of the mechanism, and a checklist for testing your own agent sandbox.
Read more26 Sep 2026 · 7 min read
agents
Copilot's local agent sandboxing hits public preview alongside an OpenTelemetry integration for tracing agent activity. What the sandbox boundary actually covers, what a useful agent-action span looks like, and why OTel is a start, not an answer.
Read more26 Sep 2026 · 3 min read
english-lesson
Daily English practice for tech professionals. Morning session covering relaxed weekend small talk with pronunciation guide, exercises, and real-world examples.
Read more26 Sep 2026 · 7 min read
agents
Cursor's new Rollouts and Security Reviewer agents watch your PR from merge to production and file revert PRs on their own. I like the idea. I don't trust the default settings, and here's the policy I'd put around them before turning either one loose.
Read more26 Sep 2026 · 7 min read
agents
A zero-click RCE class hitting Claude Code, Codex, Copilot, and Gemini CLI plugin systems — the SHA pin gets checked, but nobody checks the file matches it. Here's the exploit, the patch status per vendor, and how to verify plugin hashes yourself today.
Read more
