Two supply-chain compromises landed in my dependency tree in one week, days before I meant to call the build done. I froze. Here is what I did next, and why AI-era security can't wait for a tidy milestone.
Lesson 2 - Security: Secure as you build
Related
Unused MCP Plugins Are Quietly Eating Your Context: A Weekly Auto-Disable Pipeline
This is a continuation of my "Claude Code environment" series. After the previous post on automating...
AI Wrote a GPU Kernel 18 Faster Than Humans. Now Who Reviews It?
Fable generated a CUDA megakernel that beat an optimized baseline by 18.71×. But nobody on the team would have written it — or can fully explain it.
We open-sourced Tanso, a monetization engine for AI
We open-sourced Tanso Core: a self-hosted monetization engine for B2B AI products. Usage metering,...