Field Notes

Long pieces, short pieces and an honest archive.

Featured essays come first, followed by technical notes and project notes you can filter by category. Our Article Crew produces most pieces, and a senior engineer edits them. We write about what was hard, what was wrong and what we changed.

Recent notes

Shorter and more frequent.

Technical write-ups, agent team updates and project notes.

Infra & Security · 2026-11-06 · 7 min

Corporate SSL Interception Breaks AI Coding Telemetry

  • #ssl-interception
  • #zscaler
  • #ai-sdk
  • #cert-pinning

AI & Agents · 2026-11-06 · 5 min

Cross-Lingual Embeddings Skew Singapore Property Terminology

  • #rag
  • #embeddings
  • #singapore-property
  • #multilingual
  • #vector-search

Infra & Security · 2026-11-05 · 8 min

Autonomous Tools Require Just-In-Time Credential Leasing

  • #agent-security
  • #hashicorp-vault
  • #iam
  • #ephemeral-tokens
  • #llm-ops

AI & Agents · 2026-11-05 · 5 min

Edge AI Cannot Reliably Trigger Hardware Interrupts

  • #edge-ai
  • #rtos
  • #hardware-automation
  • #c-programming

AI & Agents · 2026-11-05 · 7 min

Streaming Agent UI Into 2010 ASP.NET WebForms

  • #asp-net-webforms
  • #ai-agents
  • #sse
  • #legacy-modernization
  • #iis

Infra & Security · 2026-10-16 · 6 min

Private MCP Tunnels Need Asset Registers

  • #mcp
  • #shadow-it
  • #access-control
  • #agent-architecture
  • #compliance

Infra & Security · 2026-10-15 · 7 min

RAG Pipelines Must Inherit Row-Level Security

  • #rag-architecture
  • #row-level-security
  • #active-directory
  • #compliance
  • #vector-databases

Infra & Security · 2026-10-14 · 7 min

On-Prem Agents Need Data-Gravity Runbooks

  • #data-gravity
  • #on-prem-ai
  • #rag-architecture
  • #vendor-lock-in

Compliance · 2026-10-13 · 5 min

Cursor Blame Makes AI Authorship A Permanent Audit Surface

  • #cursor-blame
  • #compliance
  • #git-history
  • #ai-authorship
  • #ip-assignment

AI & Agents · 2026-10-12 · 6 min

Tool Result Payloads Need Size Budgets

  • #tool-calls
  • #payload-budgets
  • #agent-architecture
  • #system-design

Compliance · 2026-10-08 · 5 min

Singapore's MGF vs EU AI Act: The SME Compliance Gulf

  • #eu-ai-act
  • #imda-mgf
  • #geo-fencing
  • #ai-compliance

Infra & Security · 2026-10-07 · 6 min

Browser Agents Need Root-CA Test Fixtures

  • #browser-agents
  • #tls
  • #enterprise-it
  • #agentcore
  • #test-fixtures

Infra & Security · 2026-10-06 · 7 min

Running Agent Scratchpads in WebAssembly Isolates

  • #wasm
  • #ai-agents
  • #security
  • #v8-isolates
  • #architecture

Infra & Security · 2026-10-04 · 7 min

Agent Canary Deployments Need Shadow Commits

  • #agentic-devops
  • #canary-deployment
  • #shadow-mode
  • #llm-ops
  • #database-safety

AI & Agents · 2026-10-04 · 7 min

Agent-to-Agent Handoffs Need Zod Contracts, Not Text

  • #langgraph
  • #zod
  • #pydantic
  • #agentic-design
  • #multi-agent

AI & Agents · 2026-09-30 · 8 min

Programmatic Tool Calling Needs Intermediate Ledgers

  • #tool-calling
  • #agent-architecture
  • #audit-trails
  • #llm-orchestration
  • #enterprise-ai

AI & Agents · 2026-09-29 · 7 min

ACP Turns IDE Choice Into An Integration Contract

  • #acp
  • #agentic-dev
  • #ide-tooling
  • #compliance
  • #governance

AI & Agents · 2026-09-26 · 7 min

Agent Instruction Layers Need Precedence Matrices

  • #agent-architecture
  • #configuration
  • #llmops
  • #copilot

AI & Agents · 2026-09-26 · 5 min

Mid-Conversation System Messages Need Transcript Markers

  • #agent-architecture
  • #eval-frameworks
  • #state-management
  • #claude
  • #audit-logs

AI & Agents · 2026-09-22 · 5 min

Citation Agents Must Not Manufacture Evidence

  • #agent-architecture
  • #guardrails
  • #retrieval-patterns
  • #validation

Compliance · 2026-09-21 · 7 min

Health Agents Need Source Recency Bands

  • #health-tech
  • #rag-architecture
  • #compliance
  • #data-freshness

Products · 2026-09-19 · 8 min

Enterprise Deep Research Needs Citation Triage Screens

  • #rag-architecture
  • #enterprise-ai
  • #product-design
  • #compliance

Infra & Security · 2026-09-18 · 7 min

Cyber Transcript Sweeps Need Search-Method Receipts

  • #agentic-search
  • #audit-evidence
  • #incident-response
  • #evals

AI & Agents · 2026-09-14 · 6 min

Data Agents Need Metric Definition Contracts

  • #data-agents
  • #semantic-layer
  • #bi-dashboards
  • #llm-hallucination
  • #metric-contracts

Compliance · 2026-09-12 · 7 min

Mounted Inputs Need Data Classification Labels

  • #openai-agents-sdk
  • #data-classification
  • #audit-trails
  • #sandbox-security

Infra & Security · 2026-09-11 · 6 min

Managed Agent Sandboxes Need Seed Data Contracts

  • #agent-sandboxes
  • #uat-discipline
  • #data-contracts
  • #ai-infrastructure

AI & Agents · 2026-09-10 · 5 min

Non-Developer Codex Needs Technical Sign-Off Queues

  • #shadow-it
  • #ai-coding
  • #governance
  • #ci-cd
  • #devops

AI & Agents · 2026-09-10 · 6 min

Tool-Written Programs Need Fixture Tests

  • #tool-calling
  • #testing
  • #agent-architecture
  • #javascript

Infra & Security · 2026-09-04 · 6 min

Cyber Evals Need Real-Internet Circuit Breakers

  • #cyber-security
  • #ai-agents
  • #network-isolation
  • #sandboxing
  • #devops

Infra & Security · 2026-09-03 · 7 min

Tool Guardrails Need Boundary Coverage Maps

  • #agent-security
  • #tool-calling
  • #architecture
  • #guardrails
  • #data-validation

Foundations · 2026-09-02 · 5 min

Agents SDK Upgrades Need Replay Suites

  • #agents-sdk
  • #llmops
  • #regression-testing
  • #agentic-design
  • #wgrow

Infra & Security · 2026-09-02 · 7 min

Physical Device Agents Need Dead-Man Switches

  • #ai-agents
  • #hardware-safety
  • #plc-patterns
  • #robotics

AI & Agents · 2026-08-27 · 6 min

Agent Browsers Can Drop Pixels, Not Form Semantics

  • #kitesurf
  • #agent-browsers
  • #web-automation
  • #form-semantics

Infra & Security · 2026-08-27 · 5 min

Sensitive Prompts Belong Outside The Model Transcript

  • #agent-security
  • #llm-transcript
  • #vscode-copilot
  • #cli-tools

AI & Agents · 2026-08-25 · 6 min

Agent Memory Needs Garbage Collection Jobs

  • #agentic-architecture
  • #memory-management
  • #cost-optimization
  • #data-retention

Infra & Security · 2026-08-19 · 6 min

Agent Gateway Policies Need Simulation Runs

  • #agent-gateways
  • #aws-iam
  • #policy-simulation
  • #security-engineering
  • #regression-testing

Infra & Security · 2026-08-18 · 6 min

Security Autofix Agents Need Fix Lineage

  • #agentic-security
  • #devsecops
  • #code-review
  • #github-autofix

AI & Agents · 2026-08-10 · 6 min

No-Code Agent Builders Need Promotion Gates

  • #no-code-agents
  • #release-management
  • #copilot-studio
  • #governance

AI & Agents · 2026-08-09 · 7 min

Agentic ERP Apps Need Transaction Boundaries

  • #erp
  • #transaction-boundaries
  • #state-machines
  • #agentic-design
  • #oracle

Infra & Security · 2026-08-09 · 5 min

Windows Computer Use Needs App Allow Lists

  • #windows-security
  • #agent-runtime
  • #allow-lists
  • #computer-use

Products · 2026-08-01 · 5 min

Chat And Work Need Different Product Contracts

  • #ux-design
  • #agentic-workflows
  • #product-strategy
  • #conversational-ai

AI & Agents · 2026-07-07 · 5 min

Enterprise Agents Need Hidden-Workflow Maps

  • #agentic-workflows
  • #enterprise-erp
  • #state-machines
  • #system-design

Infra & Security · 2026-07-07 · 5 min

Gartner's Agent Autonomy Tiers Demand Network Boundaries

  • #ai-governance
  • #iam
  • #aws
  • #network-security
  • #api-gateway

Compliance · 2026-07-06 · 5 min

Content Credentials Need Pipeline Tests

  • #c2pa
  • #synthid
  • #pipeline-testing
  • #eu-ai-act
  • #devops

AI & Agents · 2026-07-06 · 6 min

Upgrading An LLM Version Requires Data Migration Thinking

  • #llmops
  • #multi-agent
  • #schema-drift
  • #architecture
  • #migrations

AI & Agents · 2026-06-29 · 7 min

Agent Adoption Is Stuck At Verification

  • #ai-agents
  • #verification
  • #eval-gates
  • #llmops

Infra & Security · 2026-06-29 · 5 min

Agent Egress Firewalls: Blocking Code Helpers From The LAN

  • #docker
  • #network-security
  • #squid-proxy
  • #llm-agents
  • #vpc

Infra & Security · 2026-06-29 · 4 min

Token Budgets Are Department Budgets In Disguise

  • #llmops
  • #finops
  • #agent-architecture
  • #api-management

AI & Agents · 2026-06-28 · 6 min

Agent Framework Choice Is Now A Delivery Risk

  • #agent-frameworks
  • #delivery-risk
  • #architecture
  • #adr
  • #sdk-evaluation

Compliance · 2026-06-28 · 5 min

The 'Model Did It' Is Not An Incident Report

  • #agent-accountability
  • #ci-cd-governance
  • #mlops
  • #kubernetes-manifests

AI & Agents · 2026-06-21 · 6 min

Agent-First APIs Should Return Recovery Paths

  • #api-design
  • #ai-agents
  • #error-handling
  • #legacy-systems

AI & Agents · 2026-06-21 · 4 min

Computer-Use Agents Need Screen-Level Audit Logs

  • #audit-trails
  • #computer-use
  • #browser-agents
  • #compliance
  • #dom-state

Infra & Security · 2026-06-20 · 7 min

Agent Permission Classifiers Need Their Own Test Suite

  • #agent-security
  • #permission-classifiers
  • #claude-code
  • #regression-testing
  • #blast-radius

Foundations · 2026-06-20 · 6 min

Agent Runtimes Are Relearning Operating Systems

  • #agent-runtimes
  • #operating-systems
  • #architecture
  • #tool-dispatch
  • #state-management

AI & Agents · 2026-06-20 · 6 min

Spreadsheet Agents Need Cell-Level Evidence

  • #spreadsheet-agents
  • #audit-trails
  • #finance-ops
  • #data-provenance
  • #excel

AI & Agents · 2026-06-13 · 5 min

Codex On Mobile: Approval Is Now A Runtime Surface

  • #mobile-ops
  • #agentic-dev
  • #async-workflows
  • #code-review

Infra & Security · 2026-06-12 · 7 min

Agent Tool Catalogues Are Risk Inventories

  • #mcp
  • #risk-management
  • #agent-architecture
  • #tool-calling

AI & Agents · 2026-06-12 · 6 min

Agents That Pay Need Payment Limits, Not Vibes

  • #aws-bedrock
  • #agentic-workflows
  • #stripe-payments
  • #erp-architecture
  • #exception-handling

Compliance · 2026-06-12 · 7 min

PDPC GenAI Guidelines Turn Training Data Into A Delivery Question

  • #pdpa-compliance
  • #pii-redaction
  • #rag-architecture
  • #synthetic-data
  • #vector-deletion

AI & Agents · 2026-06-05 · 4 min

Codex On The Phone: Useful, Dangerous, Mostly Triage

  • #github-mobile
  • #code-review
  • #devops
  • #agentic-dev

Foundations · 2026-06-05 · 6 min

Idempotency Keys: The Old Trick Every Agent Workflow Needs

  • #idempotency
  • #agent-architecture
  • #state-management
  • #webhooks

Infra & Security · 2026-06-05 · 6 min

Postgres JSONB as the Scratchpad for Multi-Agent State

  • #postgres
  • #agent-state
  • #pgvector
  • #jsonb
  • #architecture

Infra & Security · 2026-06-05 · 7 min

Prompt Injection Firewalls for HR Agents

  • #prompt-injection
  • #llm-security
  • #red-teaming
  • #regex

Infra & Security · 2026-06-05 · 7 min

Semantic Caching for Agent Crews: Cutting Duplicate Token Spend

  • #semantic-caching
  • #redis
  • #token-optimization
  • #agent-crews

AI & Agents · 2026-05-23 · 8 min

Agent-to-Agent Auth in 2026: Why OAuth Breaks Down for Crews

  • #oauth
  • #mtls
  • #agent-orchestration
  • #jwt
  • #security

Infra & Security · 2026-05-21 · 6 min

MCP RCE Claims: The Protocol Is Not Your Sandbox

  • #mcp
  • #agent-security
  • #rce
  • #process-isolation
  • #sandboxing

Compliance · 2026-05-20 · 6 min

Writing B2B SLAs When Core Services Rely on OpenAI Uptime

  • #sla-contracts
  • #openai-uptime
  • #b2b-procurement
  • #fallback-models

AI & Agents · 2026-05-19 · 11 min

Escaping Context Collapse: An N-ary Tree Architecture for 100K-Word Generation

Large context windows fail at generating cohesive text past 20,000 words due to context collapse. To reliably generate 100,000 words, developers must replace linear RAG with a hierarchical N-ary tree architecture and a centralized global state.

  • #ai-agents
  • #llm-architecture
  • #long-form-generation
  • #binary-tree
  • #ai-research

Archive · 2026-05-18 · 8 min

Maintaining a Windows CE 6.0 Scanner Fleet in 2026

    AI & Agents · 2026-05-18 · 7 min

    Hardcoding the DAG for B2B Approval Agents

    • #langgraph
    • #state-machines
    • #compliance
    • #procurement

    AI & Agents · 2026-05-17 · 4 min

    Sandboxed Agents Are A Runtime Feature, Not A Policy

    • #agents-sdk
    • #iam
    • #architecture
    • #security

    AI & Agents · 2026-05-10 · 6 min

    When AI Coding Agents Become Line Items, Not Toys

    • #cost-management
    • #ai-agents
    • #architecture
    • #api-tokens

    AI & Agents · 2026-05-07 · 6 min

    The Agent Harness Is Now Architecture

    • #agent-architecture
    • #orchestration
    • #llm-harness
    • #anthropic
    • #deterministic-dags

    Infra & Security · 2026-05-04 · 7 min

    Reversibility Is The First Agent Requirement

    • #agentic-ai
    • #security
    • #rollback
    • #incident-response
    • #architecture

    Infra & Security · 2026-04-30 · 5 min

    Agent Skills Are Build Artifacts, Not Prompt Snippets

    • #agent-security
    • #owasp
    • #devsecops
    • #supply-chain
    • #agentic-design

    Infra & Security · 2026-04-24 · 6 min

    Redis Task Queues for Inter-Crew AI Handoffs

    • #redis
    • #agent-orchestration
    • #microservices
    • #architecture
    • #latency

    Infra & Security · 2026-04-18 · 8 min

    Routing Classifications to Llama 3 to Save Frontier Tokens

    • #llm-routing
    • #vllm
    • #cost-optimization
    • #llama-3
    • #architecture

    AI & Agents · 2026-04-14 · 7 min

    Using Agents to Backfill NUnit Tests on a 2012 C# Monolith

    • #legacy-code
    • #c-sharp
    • #nunit
    • #agent-workflows
    • #tech-debt

    Infra & Security · 2026-04-11 · 6 min

    MCP Over STDIO: The Part Everyone Pretended Was Boring

    • #mcp
    • #security
    • #agent-architecture
    • #process-isolation
    • #tool-calling

    AI & Agents · 2026-04-08 · 6 min

    GitHub Agentic Workflows: Markdown Is Not Governance

    • #github-actions
    • #agentic-workflows
    • #governance
    • #devops
    • #compliance

    Infra & Security · 2026-04-05 · 6 min

    Assigning Dependabot To An Agent: Patch Faster, Review Harder

    • #dependabot
    • #ai-agents
    • #security-patching
    • #devsecops
    • #vulnerability-mgmt

    Compliance · 2026-04-02 · 6 min

    GitHub Agent HQ Makes Agent Choice A Governance Problem

    • #github
    • #governance
    • #compliance
    • #agentic-dev
    • #audit

    Infra & Security · 2026-03-29 · 7 min

    Local LLMs for First-Pass Medical PII Redaction

    • #local-llm
    • #pdpa
    • #medical-tech
    • #ner
    • #hybrid-ai

    AI & Agents · 2026-03-26 · 6 min

    Singpass Myinfo v5 and FAPI 2.0: An Agentic UI Upgrade

    • #singpass-myinfo
    • #fapi-2
    • #agentic-architecture
    • #gov-tech
    • #dpop

    Compliance · 2026-03-23 · 7 min

    The Right to be Forgotten in a Vector Database

    • #vector-database
    • #pdpa
    • #compliance
    • #pinecone
    • #rag