Field notes from wGrow's agentic engineering studio in Singapore — eighteen years of PDPA-grade delivery, agent crews, and the systems we run in production.https://www.wgrow.com/en-sghttps://www.wgrow.com/field-notes/agent-tool-catalogues-are-risk-inventories/https://www.wgrow.com/field-notes/agent-tool-catalogues-are-risk-inventories/Fri, 12 Jun 2026 00:00:00 GMTInfra & Securitymcprisk-managementagent-architecturetool-callinginfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/agents-that-pay-need-payment-limits-not-vibes/https://www.wgrow.com/field-notes/agents-that-pay-need-payment-limits-not-vibes/Fri, 12 Jun 2026 00:00:00 GMTAI & Agentsaws-bedrockagentic-workflowsstripe-paymentserp-architectureexception-handlinginfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/pdpc-genai-guidelines-turn-training-data-into-a-delivery-question/https://www.wgrow.com/field-notes/pdpc-genai-guidelines-turn-training-data-into-a-delivery-question/Fri, 12 Jun 2026 00:00:00 GMTCompliancepdpa-compliancepii-redactionrag-architecturesynthetic-datavector-deletioninfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/codex-on-the-phone-useful-dangerous-mostly-triage/https://www.wgrow.com/field-notes/codex-on-the-phone-useful-dangerous-mostly-triage/Fri, 05 Jun 2026 00:00:00 GMTAI & Agentsgithub-mobilecode-reviewdevopsagentic-devinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/idempotency-keys-the-old-trick-every-agent-workflow-needs/https://www.wgrow.com/field-notes/idempotency-keys-the-old-trick-every-agent-workflow-needs/Fri, 05 Jun 2026 00:00:00 GMTFoundationsidempotencyagent-architecturestate-managementwebhooksinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/postgres-jsonb-as-the-scratchpad-for-multi-agent-state/https://www.wgrow.com/field-notes/postgres-jsonb-as-the-scratchpad-for-multi-agent-state/Fri, 05 Jun 2026 00:00:00 GMTInfra & Securitypostgresagent-statepgvectorjsonbarchitectureinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/prompt-injection-firewalls-for-hr-agents/https://www.wgrow.com/field-notes/prompt-injection-firewalls-for-hr-agents/Fri, 05 Jun 2026 00:00:00 GMTInfra & Securityprompt-injectionllm-securityred-teamingregexinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/semantic-caching-for-agent-crews-cutting-token-bills-by-40/https://www.wgrow.com/field-notes/semantic-caching-for-agent-crews-cutting-token-bills-by-40/Fri, 05 Jun 2026 00:00:00 GMTInfra & Securitysemantic-cachingredistoken-optimizationagent-crewsinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/agent-to-agent-auth-in-2026-why-oauth-breaks-down-for-crews/https://www.wgrow.com/field-notes/agent-to-agent-auth-in-2026-why-oauth-breaks-down-for-crews/Sat, 23 May 2026 00:00:00 GMTAI & Agentsoauthmtlsagent-orchestrationjwtsecurityinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/mcp-rce-claims-the-protocol-is-not-your-sandbox/https://www.wgrow.com/field-notes/mcp-rce-claims-the-protocol-is-not-your-sandbox/Thu, 21 May 2026 00:00:00 GMTInfra & Securitymcpagent-securityrceprocess-isolationsandboxinginfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/writing-b2b-slas-when-core-services-rely-on-openai-uptime/https://www.wgrow.com/field-notes/writing-b2b-slas-when-core-services-rely-on-openai-uptime/Wed, 20 May 2026 00:00:00 GMTCompliancesla-contractsopenai-uptimeb2b-procurementfallback-modelsinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/escaping-context-collapse-an-n-ary-tree-architecture-for-100k-word-generation/https://www.wgrow.com/field-notes/escaping-context-collapse-an-n-ary-tree-architecture-for-100k-word-generation/Large context windows fail at generating cohesive text past 20,000 words due to context collapse. To reliably generate 100,000 words, developers must replace linear RAG with a hierarchical N-ary tree architecture and a centralized global state.Tue, 19 May 2026 00:00:00 GMTAI & Agentsai-agentsllm-architecturelong-form-generationbinary-treeai-researchinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/maintaining-a-windows-ce-60-scanner-fleet-in-2026/https://www.wgrow.com/field-notes/maintaining-a-windows-ce-60-scanner-fleet-in-2026/Mon, 18 May 2026 00:00:00 GMTArchiveinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/why-we-hardcode-the-dag-for-b2b-approval-agents/https://www.wgrow.com/field-notes/why-we-hardcode-the-dag-for-b2b-approval-agents/Mon, 18 May 2026 00:00:00 GMTAI & Agentslanggraphstate-machinescomplianceprocurementinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/sandboxed-agents-are-a-runtime-feature-not-a-policy/https://www.wgrow.com/field-notes/sandboxed-agents-are-a-runtime-feature-not-a-policy/Sun, 17 May 2026 00:00:00 GMTAI & Agentsagents-sdkiamarchitecturesecurityinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/the-50-year-compile-how-1970s-math-defeated-gofai-and-built-modern-ai/https://www.wgrow.com/field-notes/the-50-year-compile-how-1970s-math-defeated-gofai-and-built-modern-ai/Paul Werbos derived backpropagation in 1974 on a machine that could not run it. The fifty-year wait between the math arriving and the compute catching up is the story of how 1970s ideas, not 2010s ones, built modern AI.Sun, 17 May 2026 00:00:00 GMTAI & Agentsgenetic-algorithmsbackpropagationai-historyneural-networksmachine-learninginfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/the-million-token-mirage-a-micro-modular-framework-for-ai-coding/https://www.wgrow.com/field-notes/the-million-token-mirage-a-micro-modular-framework-for-ai-coding/Massive AI context windows degrade reasoning and introduce silent code regressions when treated as infinite storage. Engineers must cap working context at 30 percent and enforce strict session hygiene using handover notes to maintain architectural continuity.Fri, 15 May 2026 00:00:00 GMTAI & Agentscontext-engineeringai-codingengineering-managementllm-sessionsmicro-modular-codinginfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/the-memory-bottleneck-why-your-curator-agent-dictates-ai-success/https://www.wgrow.com/field-notes/the-memory-bottleneck-why-your-curator-agent-dictates-ai-success/Massive context windows aren't working memory—they are unsearchable junk drawers that degrade agent reasoning. To prevent context collapse, multi-agent systems require a dedicated Curator agent to actively filter, deduplicate, and synthesize information.Thu, 14 May 2026 00:00:00 GMTAI & Agentsagentsmemoryarchitecturecuratorraginfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/when-ai-coding-agents-become-line-items-not-toys/https://www.wgrow.com/field-notes/when-ai-coding-agents-become-line-items-not-toys/Sun, 10 May 2026 00:00:00 GMTAI & Agentscost-managementai-agentsarchitectureapi-tokensinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/vibe-coding-is-the-onramp-not-the-runway/https://www.wgrow.com/field-notes/vibe-coding-is-the-onramp-not-the-runway/Karpathy named the move from typing code to specifying intent. After twelve months in production with it, here's what stays, what breaks, and what the actual discipline looks like.Fri, 08 May 2026 00:00:00 GMTAI & Agentsagentsvibe-codingagentic-engineeringclaude-codekarpathyinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/the-agent-harness-is-now-architecture/https://www.wgrow.com/field-notes/the-agent-harness-is-now-architecture/Thu, 07 May 2026 00:00:00 GMTAI & Agentsagent-architectureorchestrationllm-harnessanthropicdeterministic-dagsinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/inside-the-article-crew/https://www.wgrow.com/field-notes/inside-the-article-crew/The editorial pipeline we run inside WaterDoctor's backend. How one agent per stage, a verbatim-quote check, a Crossref DOI cross-check, and a live-URL fetch keep fabricated citations out of the prose.Wed, 06 May 2026 00:00:00 GMTAI & Agentsagentseditorialevalsmemoryinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/reversibility-is-the-first-agent-requirement/https://www.wgrow.com/field-notes/reversibility-is-the-first-agent-requirement/Mon, 04 May 2026 00:00:00 GMTInfra & Securityagentic-aisecurityrollbackincident-responsearchitectureinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/sql-server-hardening/https://www.wgrow.com/field-notes/sql-server-hardening/Our working SQL Server hardening checklist — the controls that aged well kept, the ones that aged badly cut, and the ones that need new framing in light of MGF and modern Azure SQL.Mon, 04 May 2026 00:00:00 GMTInfra & Securitysql-serversecuritypdpainfrainfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/inside-the-waterdoctor-crew/https://www.wgrow.com/field-notes/inside-the-waterdoctor-crew/Two pipelines, one weekly cadence, one human gate. How the WaterDoctor crew reads ten aquaculture journals, fact-checks every paper, then turns each pond's pH/DO/ammonia stream into a bilingual PDF the farm manager, the vet and the regulator can all read off.Sat, 02 May 2026 00:00:00 GMTAI & Agentsagentsembeddediotaquacultureevalsinfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/agent-skills-are-build-artifacts-not-prompt-snippets/https://www.wgrow.com/field-notes/agent-skills-are-build-artifacts-not-prompt-snippets/Thu, 30 Apr 2026 00:00:00 GMTInfra & Securityagent-securityowaspdevsecopssupply-chainagentic-designinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/inside-the-selection-crew/https://www.wgrow.com/field-notes/inside-the-selection-crew/How the Selection Crew briefs an e-commerce buy across six lanes — market intelligence, trend forecast, competitor radar, keyword research, arbitrage scout, sentiment — in EN ⇌ 中文, async, with a downloadable .docx the buyer signs before procurement moves.Wed, 29 Apr 2026 00:00:00 GMTAI & Agentsagentsecommercesourcingresearchinfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/aws-network-firewall-app-server/https://www.wgrow.com/field-notes/aws-network-firewall-app-server/Default posture for putting AWS Network Firewall at the VPC edge in front of a public-facing app server, plus the agent-era addition.Tue, 28 Apr 2026 00:00:00 GMTInfra & Securityawssecurityinfrainfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/cloud-security-architecture-medical/https://www.wgrow.com/field-notes/cloud-security-architecture-medical/A dual-cloud (AWS + Azure) security architecture for a Singapore medical group: VPN, segmentation, ELK / OpenSearch, and the controls now in scope under MGF and PDPC enforcement.Sat, 25 Apr 2026 00:00:00 GMTComplianceawsazuresecuritypdpamgfmedicalinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/redis-task-queues-for-inter-crew-ai-handoffs/https://www.wgrow.com/field-notes/redis-task-queues-for-inter-crew-ai-handoffs/Fri, 24 Apr 2026 00:00:00 GMTInfra & Securityredisagent-orchestrationmicroservicesarchitecturelatencyinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/hospital-visitor-logging-pdpa/https://www.wgrow.com/field-notes/hospital-visitor-logging-pdpa/Designing visitor logging for a Singapore hospital under PDPA — SHA-256-hashed IC numbers plus last-4-digit verification — and what we'd build today, given Singpass, MGF, and PDPC's evolved enforcement.Wed, 22 Apr 2026 00:00:00 GMTCompliancepdpahealthcaresecuritysingpassinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/inside-the-image-crew/https://www.wgrow.com/field-notes/inside-the-image-crew/How we wired the Image Crew on the ArightAI platform — five analyst agents brief the shoot, a render agent ships the frame, a grader catches drift, an art director signs off. The anchor-first pattern that keeps two thousand SKUs in lock with one brand reference set.Wed, 22 Apr 2026 00:00:00 GMTAI & Agentsagentsecommerceimageryevalsinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/scaling-patient-management-without-server-upgrades/https://www.wgrow.com/field-notes/scaling-patient-management-without-server-upgrades/How we got a 500K-client patient system on AWS back into reasonable response times without upgrading the host — splitting tiers, distributing cold data, and the agent-loop reporting pipeline that replaced template code.Sun, 19 Apr 2026 00:00:00 GMTInfra & Securityawsms-sqlscalabilityhealthcareinfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/routing-classifications-to-llama-3-to-save-frontier-tokens/https://www.wgrow.com/field-notes/routing-classifications-to-llama-3-to-save-frontier-tokens/Sat, 18 Apr 2026 00:00:00 GMTInfra & Securityllm-routingvllmcost-optimizationllama-3architectureinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/inside-the-bd-crew/https://www.wgrow.com/field-notes/inside-the-bd-crew/How we built the bilingual EN/中文 BD pipeline that ships into WaterDoctor's CRM every week — six lane-specialist scouts, a deduping editor, a corroborating verifier, and a registry that grows by proposal, not by crawl.Wed, 15 Apr 2026 00:00:00 GMTAI & Agentsagentsbdevalsregistryinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/virtualizing-windows-server-2000/https://www.wgrow.com/field-notes/virtualizing-windows-server-2000/Lifting a semiconductor-testing app off a dying HP ProLiant onto VMware vSphere — a reminder that the boring rescue still happens, and what we'd do differently if we got the same call today.Wed, 15 Apr 2026 00:00:00 GMTInfra & Securitylegacyvirtualizationvmwareinfrainfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/using-agents-to-backfill-nunit-tests-on-a-2012-c-monolith/https://www.wgrow.com/field-notes/using-agents-to-backfill-nunit-tests-on-a-2012-c-monolith/Tue, 14 Apr 2026 00:00:00 GMTAI & Agentslegacy-codec-sharpnunitagent-workflowstech-debtinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/lets-encrypt-iis-windows-service/https://www.wgrow.com/field-notes/lets-encrypt-iis-windows-service/When a custom C# Windows Service for Let's Encrypt automation on IIS still earns its keep — and when a maintained tool is the right answer.Sun, 12 Apr 2026 00:00:00 GMTInfra & Securitywindowsiislets-encryptinfrainfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/mcp-over-stdio-the-part-everyone-pretended-was-boring/https://www.wgrow.com/field-notes/mcp-over-stdio-the-part-everyone-pretended-was-boring/Sat, 11 Apr 2026 00:00:00 GMTInfra & Securitymcpsecurityagent-architectureprocess-isolationtool-callinginfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/eval-harness-or-its-a-demo/https://www.wgrow.com/field-notes/eval-harness-or-its-a-demo/Five rules we use on every agentic build, drawn from a year of live client work, and the eval template we ship to every new engagement on day one.Fri, 10 Apr 2026 00:00:00 GMTAI & Agentsagentsevalsengineeringclaude-codeinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/github-agentic-workflows-markdown-is-not-governance/https://www.wgrow.com/field-notes/github-agentic-workflows-markdown-is-not-governance/Wed, 08 Apr 2026 00:00:00 GMTAI & Agentsgithub-actionsagentic-workflowsgovernancedevopscomplianceinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/inside-the-finance-crew/https://www.wgrow.com/field-notes/inside-the-finance-crew/Five narrow finance specialists running the close cycle, financial statements and statutory filings for a Singapore SME caseload — every figure tied to a source row, every filing signed by a registered chartered accountant. How we wired the agent crew under the licence.Wed, 08 Apr 2026 00:00:00 GMTAI & Agentsagentsfinancesfrsirasacrainfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/rdp-monitor-windows-service/https://www.wgrow.com/field-notes/rdp-monitor-windows-service/Most teams should turn RDP off entirely. For the ones that can't, a small Windows Service watching Event ID 4625 still has its place — here's the design and where it fits.Wed, 08 Apr 2026 00:00:00 GMTInfra & Securitywindowsrdpsecurityinfrainfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/assigning-dependabot-to-an-agent-patch-faster-review-harder/https://www.wgrow.com/field-notes/assigning-dependabot-to-an-agent-patch-faster-review-harder/Sun, 05 Apr 2026 00:00:00 GMTInfra & Securitydependabotai-agentssecurity-patchingdevsecopsvulnerability-mgmtinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/excel-vba-still-the-right-tool/https://www.wgrow.com/field-notes/excel-vba-still-the-right-tool/Why an Excel VBA build for a sales-order management system was the right call when the client's IT compliance gate was 12 months — and why the pattern shows up more often in the AI era, not less.Sat, 04 Apr 2026 00:00:00 GMTProductsexcelvbadeliveryinfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/github-agent-hq-makes-agent-choice-a-governance-problem/https://www.wgrow.com/field-notes/github-agent-hq-makes-agent-choice-a-governance-problem/Thu, 02 Apr 2026 00:00:00 GMTCompliancegithubgovernancecomplianceagentic-devauditinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/imda-mgf-for-builders/https://www.wgrow.com/field-notes/imda-mgf-for-builders/Singapore published the world's first agentic-AI governance framework in January. Here's a builder's-eye reading: which controls are zero-cost if you architect for them, and which ones cost real engineering hours.Thu, 02 Apr 2026 00:00:00 GMTComplianceagentscomplianceimda-mgfpdpasingaporeinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/business-continuity-cross-cloud/https://www.wgrow.com/field-notes/business-continuity-cross-cloud/A BCM design for a Singapore real-estate agency's ERP — primary on AWS, secondary on Azure, JSON sync APIs, Windows resync service. What we'd cut, what we'd keep, and the SG listing-readiness angle.Mon, 30 Mar 2026 00:00:00 GMTInfra & Securitybcmawsazureerpreal-estateinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/local-llms-for-first-pass-medical-pii-redaction/https://www.wgrow.com/field-notes/local-llms-for-first-pass-medical-pii-redaction/Sun, 29 Mar 2026 00:00:00 GMTInfra & Securitylocal-llmpdpamedical-technerhybrid-aiinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/singpass-myinfo-v5-and-fapi-20-an-agentic-ui-upgrade/https://www.wgrow.com/field-notes/singpass-myinfo-v5-and-fapi-20-an-agentic-ui-upgrade/Thu, 26 Mar 2026 00:00:00 GMTAI & Agentssingpass-myinfofapi-2agentic-architecturegov-techdpopinfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/ec-sales-property-developers/https://www.wgrow.com/field-notes/ec-sales-property-developers/Building an Executive Condominium sales-day system for a Singapore property developer: SFTP to HDB, SHA-256 columns, real-time OTP generation, and the launch-day playbook.Wed, 25 Mar 2026 00:00:00 GMTProductspropertyechdbreal-estateinfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/the-right-to-be-forgotten-in-a-vector-database/https://www.wgrow.com/field-notes/the-right-to-be-forgotten-in-a-vector-database/Mon, 23 Mar 2026 00:00:00 GMTCompliancevector-databasepdpacompliancepineconeraginfo@wgrow.com (wGrow Project Team)https://www.wgrow.com/field-notes/blockchain-financial-forecasting-what-we-tried/https://www.wgrow.com/field-notes/blockchain-financial-forecasting-what-we-tried/We used Ethereum mainnet to pin SHA-256 hashes of quarterly forecasting parameters as a tamper-evidence layer. The use case held; the chain choice didn't.Fri, 20 Mar 2026 00:00:00 GMTArchiveblockchainethereumauditreal-estateinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/ethereum-voting-what-we-tried/https://www.wgrow.com/field-notes/ethereum-voting-what-we-tried/We built a decentralized voting system on Ethereum + .NET C#. It was a working proof-of-concept. It was not a good idea. Here is the honest framing we should have led with.Sun, 15 Mar 2026 00:00:00 GMTArchiveblockchainethereumvotingarchiveinfo@wgrow.com (Timothy Mo)https://www.wgrow.com/field-notes/condo-management-system/https://www.wgrow.com/field-notes/condo-management-system/Notes from running our Condo Management System in production: defect reports, voting, booking conflicts, and the one agent we'd add to the workflow today.Thu, 05 Mar 2026 00:00:00 GMTProductscondofacility-managementproductsinfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/smart-quotation/https://www.wgrow.com/field-notes/smart-quotation/Notes on plugging an agent into our Smart Quotation workflow: what changed, what we measured, and where the verification step matters.Sat, 28 Feb 2026 00:00:00 GMTProductsquotationsalesproductsinfo@wgrow.com (Scott Li)https://www.wgrow.com/field-notes/sms-gateway-still-runs/https://www.wgrow.com/field-notes/sms-gateway-still-runs/Our industrial-grade SMS gateway is still in production at SG enterprise clients. The hardware estate has aged. The cellular generation has not. Here's the honest update.Sun, 22 Feb 2026 00:00:00 GMTProductssmsinfraproductsinfo@wgrow.com (Scott Li)