Notes
Short pieces about the methodology and architecture decisions behind the AI systems I ship — specs, evals, multi-agent orchestration, LLM integration, and the discipline of directing coding agents.
July 1, 2026
Your agents have logins nobody owns
Enterprises spun up millions of AI agents this year, and every one of them needs credentials to actually do anything — read the database, send the email, hit the API. The governance layer for those credentials doesn't exist yet. The result: 68% of organizations can't reliably tell an agent's activity apart from a human's, and live credentials are writing to production with no person accountable. The agentic enterprise's real security problem isn't prompt injection. It's identity.
- security
- agents
June 23, 2026
A fake bug report hijacked the coding agent
Security researchers showed a new attack called 'Agentjacking': send a fake error to a company's Sentry, and its AI coding agent reads the 'fix steps' and runs them — handing an attacker your credentials, with your own privileges. Claude Code, Cursor, and Codex all fell for it in testing. The lesson is bigger than one tool: every untrusted thing your agent reads is a place someone can inject commands.
- security
- agents
June 23, 2026
Your MCP servers are a supply chain now
MCP — the protocol that lets agents use tools — took off so fast that security never caught up. Researchers poisoned 9 of 11 public MCP registries with a proof-of-concept package, and an audit of 1,899 MCP servers found about 5% already carrying hidden malicious instructions. If your agent connects to third-party MCP servers, you've added a supply chain — and you need to treat it like one.
- security
- agents
June 19, 2026
Your dev tools bill by the meter now
The AI coding-tools market hit roughly $12.8 billion in 2026, up 151% in two years — but the bigger shift is how you pay. Vendors are dropping per-seat subscriptions for usage-based pricing, because agents now run for minutes or hours and burn real compute. Your tooling cost just stopped behaving like a headcount line and started behaving like a cloud bill. Here's how to manage it.
- business
- agents
June 19, 2026
The agent came for the back office
Ramp just raised $750 million at a $44 billion valuation — up from $32 billion seven months earlier — on the bet that AI agents automate corporate finance: expense reports, invoices, bookkeeping, even initiating payments. The flashy AI demos get the attention, but the ROI that's actually landing is unglamorous back-office work. Follow the boring money — and notice what makes it safe.
- business
- agents
June 19, 2026
The code that writes the code
Anthropic now says more than 80% of the code merged into its own systems is written by Claude — up from low single digits before 2025. And this month it published a serious report on recursive self-improvement: AI helping build the next AI. Strip out the sci-fi and there's a practical message for the rest of us about where the bottleneck is going, and what discipline it demands.
- agents
- methodology