<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>wGrow Field Notes</title><description>Field notes from wGrow&apos;s agentic engineering studio in Singapore — eighteen years of PDPA-grade delivery, agent crews, and the systems we run in production.</description><link>https://www.wgrow.com/</link><language>en-sg</language><item><title>Vibe coding is the on-ramp. Agentic engineering is the runway.</title><link>https://www.wgrow.com/field-notes/vibe-coding-is-the-onramp-not-the-runway/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/vibe-coding-is-the-onramp-not-the-runway/</guid><description>Karpathy named the move from typing code to specifying intent. After twelve months in production with it, here&apos;s what stays, what breaks, and what the actual discipline looks like.</description><pubDate>Fri, 08 May 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>vibe-coding</category><category>agentic-engineering</category><category>claude-code</category><category>karpathy</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Inside the Article Crew: nine stages, ten specialists, and a 95% claim-coverage gate.</title><link>https://www.wgrow.com/field-notes/inside-the-article-crew/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/inside-the-article-crew/</guid><description>The editorial pipeline we run inside WaterDoctor&apos;s backend. How one agent per stage, a verbatim-quote check, a Crossref DOI cross-check, and a live-URL fetch keep fabricated citations out of the prose.</description><pubDate>Wed, 06 May 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>editorial</category><category>evals</category><category>memory</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>SQL Server hardening checklist.</title><link>https://www.wgrow.com/field-notes/sql-server-hardening/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/sql-server-hardening/</guid><description>Our working SQL Server hardening checklist — the controls that aged well kept, the ones that aged badly cut, and the ones that need new framing in light of MGF and modern Azure SQL.</description><pubDate>Mon, 04 May 2026 00:00:00 GMT</pubDate><category>Infra &amp; Security</category><category>sql-server</category><category>security</category><category>pdpa</category><category>infra</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Inside the WaterDoctor Crew: a research desk and a sensor-to-PDF agent on a weekly cadence.</title><link>https://www.wgrow.com/field-notes/inside-the-waterdoctor-crew/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/inside-the-waterdoctor-crew/</guid><description>Two pipelines, one weekly cadence, one human gate. How the WaterDoctor crew reads ten aquaculture journals, fact-checks every paper, then turns each pond&apos;s pH/DO/ammonia stream into a bilingual PDF the farm manager, the vet and the regulator can all read off.</description><pubDate>Sat, 02 May 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>embedded</category><category>iot</category><category>aquaculture</category><category>evals</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Inside the Selection Crew: six analysts brief the buy, the buyer signs the PO.</title><link>https://www.wgrow.com/field-notes/inside-the-selection-crew/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/inside-the-selection-crew/</guid><description>How the Selection Crew briefs an e-commerce buy across six lanes — market intelligence, trend forecast, competitor radar, keyword research, arbitrage scout, sentiment — in EN ⇌ 中文, async, with a downloadable .docx the buyer signs before procurement moves.</description><pubDate>Wed, 29 Apr 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>ecommerce</category><category>sourcing</category><category>research</category><author>info@wgrow.com (Scott Li)</author></item><item><title>AWS Network Firewall in front of an app server: the setup we&apos;d actually use.</title><link>https://www.wgrow.com/field-notes/aws-network-firewall-app-server/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/aws-network-firewall-app-server/</guid><description>Default posture for putting AWS Network Firewall at the VPC edge in front of a public-facing app server, plus the agent-era addition.</description><pubDate>Tue, 28 Apr 2026 00:00:00 GMT</pubDate><category>Infra &amp; Security</category><category>aws</category><category>security</category><category>infra</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Cloud security architecture for a medical group.</title><link>https://www.wgrow.com/field-notes/cloud-security-architecture-medical/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/cloud-security-architecture-medical/</guid><description>A dual-cloud (AWS + Azure) security architecture for a Singapore medical group: VPN, segmentation, ELK / OpenSearch, and the controls now in scope under MGF and PDPC enforcement.</description><pubDate>Sat, 25 Apr 2026 00:00:00 GMT</pubDate><category>Compliance</category><category>aws</category><category>azure</category><category>security</category><category>pdpa</category><category>mgf</category><category>medical</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Hospital visitor logging under PDPA: hashing, partial IC, and what we&apos;d do differently.</title><link>https://www.wgrow.com/field-notes/hospital-visitor-logging-pdpa/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/hospital-visitor-logging-pdpa/</guid><description>Designing visitor logging for a Singapore hospital under PDPA — SHA-256-hashed IC numbers plus last-4-digit verification — and what we&apos;d build today, given Singpass, MGF, and PDPC&apos;s evolved enforcement.</description><pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate><category>Compliance</category><category>pdpa</category><category>healthcare</category><category>security</category><category>singpass</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Inside the Image Crew: eight e-commerce roles, one anchor, brand-locked across six channels.</title><link>https://www.wgrow.com/field-notes/inside-the-image-crew/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/inside-the-image-crew/</guid><description>How we wired the Image Crew on the ArightAI platform — five analyst agents brief the shoot, a render agent ships the frame, a grader catches drift, an art director signs off. The anchor-first pattern that keeps two thousand SKUs in lock with one brand reference set.</description><pubDate>Wed, 22 Apr 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>ecommerce</category><category>imagery</category><category>evals</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Scaling a patient-management system without buying a bigger server.</title><link>https://www.wgrow.com/field-notes/scaling-patient-management-without-server-upgrades/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/scaling-patient-management-without-server-upgrades/</guid><description>How we got a 500K-client patient system on AWS back into reasonable response times without upgrading the host — splitting tiers, distributing cold data, and the agent-loop reporting pipeline that replaced template code.</description><pubDate>Sun, 19 Apr 2026 00:00:00 GMT</pubDate><category>Infra &amp; Security</category><category>aws</category><category>ms-sql</category><category>scalability</category><category>healthcare</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Inside the BD Crew: six narrow scouts, a verifier, and a human in the only seat that signs.</title><link>https://www.wgrow.com/field-notes/inside-the-bd-crew/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/inside-the-bd-crew/</guid><description>How we built the bilingual EN/中文 BD pipeline that ships into WaterDoctor&apos;s CRM every week — six lane-specialist scouts, a deduping editor, a corroborating verifier, and a registry that grows by proposal, not by crawl.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>bd</category><category>evals</category><category>registry</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Virtualizing a Windows Server 2000 box: the boring rescue, twenty years on.</title><link>https://www.wgrow.com/field-notes/virtualizing-windows-server-2000/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/virtualizing-windows-server-2000/</guid><description>Lifting a semiconductor-testing app off a dying HP ProLiant onto VMware vSphere — a reminder that the boring rescue still happens, and what we&apos;d do differently if we got the same call today.</description><pubDate>Wed, 15 Apr 2026 00:00:00 GMT</pubDate><category>Infra &amp; Security</category><category>legacy</category><category>virtualization</category><category>vmware</category><category>infra</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Automating Let&apos;s Encrypt for IIS: most of the C# is no longer needed.</title><link>https://www.wgrow.com/field-notes/lets-encrypt-iis-windows-service/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/lets-encrypt-iis-windows-service/</guid><description>When a custom C# Windows Service for Let&apos;s Encrypt automation on IIS still earns its keep — and when a maintained tool is the right answer.</description><pubDate>Sun, 12 Apr 2026 00:00:00 GMT</pubDate><category>Infra &amp; Security</category><category>windows</category><category>iis</category><category>lets-encrypt</category><category>infra</category><author>info@wgrow.com (Scott Li)</author></item><item><title>If it doesn&apos;t have an eval harness, it&apos;s still a demo.</title><link>https://www.wgrow.com/field-notes/eval-harness-or-its-a-demo/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/eval-harness-or-its-a-demo/</guid><description>Five rules we use on every agentic build, drawn from a year of live client work, and the eval template we ship to every new engagement on day one.</description><pubDate>Fri, 10 Apr 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>evals</category><category>engineering</category><category>claude-code</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Inside the Finance Crew: drafting the close, signing the file.</title><link>https://www.wgrow.com/field-notes/inside-the-finance-crew/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/inside-the-finance-crew/</guid><description>Five narrow finance specialists running the close cycle, financial statements and statutory filings for a Singapore SME caseload — every figure tied to a source row, every filing signed by a registered chartered accountant. How we wired the agent crew under the licence.</description><pubDate>Wed, 08 Apr 2026 00:00:00 GMT</pubDate><category>AI &amp; Agents</category><category>agents</category><category>finance</category><category>sfrs</category><category>iras</category><category>acra</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Watching RDP for brute-force: when the homemade service still wins.</title><link>https://www.wgrow.com/field-notes/rdp-monitor-windows-service/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/rdp-monitor-windows-service/</guid><description>Most teams should turn RDP off entirely. For the ones that can&apos;t, a small Windows Service watching Event ID 4625 still has its place — here&apos;s the design and where it fits.</description><pubDate>Wed, 08 Apr 2026 00:00:00 GMT</pubDate><category>Infra &amp; Security</category><category>windows</category><category>rdp</category><category>security</category><category>infra</category><author>info@wgrow.com (Scott Li)</author></item><item><title>When Excel VBA is still the right answer.</title><link>https://www.wgrow.com/field-notes/excel-vba-still-the-right-tool/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/excel-vba-still-the-right-tool/</guid><description>Why an Excel VBA build for a sales-order management system was the right call when the client&apos;s IT compliance gate was 12 months — and why the pattern shows up more often in the AI era, not less.</description><pubDate>Sat, 04 Apr 2026 00:00:00 GMT</pubDate><category>Products</category><category>excel</category><category>vba</category><category>delivery</category><author>info@wgrow.com (Scott Li)</author></item><item><title>IMDA&apos;s Model Governance Framework for Agentic AI, read by builders.</title><link>https://www.wgrow.com/field-notes/imda-mgf-for-builders/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/imda-mgf-for-builders/</guid><description>Singapore published the world&apos;s first agentic-AI governance framework in January. Here&apos;s a builder&apos;s-eye reading: which controls are zero-cost if you architect for them, and which ones cost real engineering hours.</description><pubDate>Thu, 02 Apr 2026 00:00:00 GMT</pubDate><category>Compliance</category><category>agents</category><category>compliance</category><category>imda-mgf</category><category>pdpa</category><category>singapore</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Cross-cloud business continuity for an ERP, and what we&apos;d skip.</title><link>https://www.wgrow.com/field-notes/business-continuity-cross-cloud/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/business-continuity-cross-cloud/</guid><description>A BCM design for a Singapore real-estate agency&apos;s ERP — primary on AWS, secondary on Azure, JSON sync APIs, Windows resync service. What we&apos;d cut, what we&apos;d keep, and the SG listing-readiness angle.</description><pubDate>Mon, 30 Mar 2026 00:00:00 GMT</pubDate><category>Infra &amp; Security</category><category>bcm</category><category>aws</category><category>azure</category><category>erp</category><category>real-estate</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>EC sales systems for property developers.</title><link>https://www.wgrow.com/field-notes/ec-sales-property-developers/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/ec-sales-property-developers/</guid><description>Building an Executive Condominium sales-day system for a Singapore property developer: SFTP to HDB, SHA-256 columns, real-time OTP generation, and the launch-day playbook.</description><pubDate>Wed, 25 Mar 2026 00:00:00 GMT</pubDate><category>Products</category><category>property</category><category>ec</category><category>hdb</category><category>real-estate</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Pinning financial forecasts on Ethereum: what we tried, and what we&apos;d do now.</title><link>https://www.wgrow.com/field-notes/blockchain-financial-forecasting-what-we-tried/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/blockchain-financial-forecasting-what-we-tried/</guid><description>We used Ethereum mainnet to pin SHA-256 hashes of quarterly forecasting parameters as a tamper-evidence layer. The use case held; the chain choice didn&apos;t.</description><pubDate>Fri, 20 Mar 2026 00:00:00 GMT</pubDate><category>Archive</category><category>blockchain</category><category>ethereum</category><category>audit</category><category>real-estate</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Decentralized voting on Ethereum: what we tried, archived honestly.</title><link>https://www.wgrow.com/field-notes/ethereum-voting-what-we-tried/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/ethereum-voting-what-we-tried/</guid><description>We built a decentralized voting system on Ethereum + .NET C#. It was a working proof-of-concept. It was not a good idea. Here is the honest framing we should have led with.</description><pubDate>Sun, 15 Mar 2026 00:00:00 GMT</pubDate><category>Archive</category><category>blockchain</category><category>ethereum</category><category>voting</category><category>archive</category><author>info@wgrow.com (Timothy Mo)</author></item><item><title>Vitasg.SG: what the platform looks like in the agent era.</title><link>https://www.wgrow.com/field-notes/vitasg-ecommerce/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/vitasg-ecommerce/</guid><description>We build and run the eCommerce platform for Vitasg.SG: Shopee/Lazada/TikTok storefronts, a dedicated brand portal, our TECOM order processing layer, and the catalogue + customer-service agent crew that runs on top.</description><pubDate>Tue, 10 Mar 2026 00:00:00 GMT</pubDate><category>Products</category><category>ecommerce</category><category>vitasg</category><category>tecom</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Condo management: the system we built, and the agent we&apos;d add today.</title><link>https://www.wgrow.com/field-notes/condo-management-system/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/condo-management-system/</guid><description>Notes from running our Condo Management System in production: defect reports, voting, booking conflicts, and the one agent we&apos;d add to the workflow today.</description><pubDate>Thu, 05 Mar 2026 00:00:00 GMT</pubDate><category>Products</category><category>condo</category><category>facility-management</category><category>products</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Smart Quotation, in the agent era.</title><link>https://www.wgrow.com/field-notes/smart-quotation/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/smart-quotation/</guid><description>Notes on plugging an agent into our Smart Quotation workflow: what changed, what we measured, and where the verification step matters.</description><pubDate>Sat, 28 Feb 2026 00:00:00 GMT</pubDate><category>Products</category><category>quotation</category><category>sales</category><category>products</category><author>info@wgrow.com (Scott Li)</author></item><item><title>Our 3G/4G SMS gateway is still running. Here is what we&apos;d change.</title><link>https://www.wgrow.com/field-notes/sms-gateway-still-runs/</link><guid isPermaLink="true">https://www.wgrow.com/field-notes/sms-gateway-still-runs/</guid><description>Our industrial-grade SMS gateway is still in production at SG enterprise clients. The hardware estate has aged. The cellular generation has not. Here&apos;s the honest update.</description><pubDate>Sun, 22 Feb 2026 00:00:00 GMT</pubDate><category>Products</category><category>sms</category><category>infra</category><category>products</category><author>info@wgrow.com (Scott Li)</author></item></channel></rss>