The AI Supply Chain: The Next Evolution of Third Party Risk
Most enterprise security teams believe they have third party risk under control. They send out...
Tutorials
I built an AI governance control plane solo — come try to break it (free year for the first 20 who do)
I built ThinkNEO solo — a control plane that sits between your apps and AI providers and enforces...
Building a production AI agent in TypeScript with Mastra: a 2026 step-by-step.
Building a production AI agent in TypeScript with Mastra: a 2026 step-by-step. I spent an...
Your rules file only grows. Here's how to find the rules that do nothing
This is part 3 of a series on project rules for AI coding agents. Part 1 covered how Cursor, Claude...
Logging workouts is solved. I'm building what comes after.
Every workout tracker I've tried has the same limitation: it records what you did, but it doesn't...
Your AI agent says "done." Who checks that from outside the agent?
The 90% that never lands There is a failure mode almost everyone building with agents has...
Designing an agent loop for coding
A prompt tells a coding agent what to do once. Nearly everything that matters happens after the first...
When AI Knows Everything, What Should Humans Learn?
AI knows everything. You ask Claude a coding question, it writes the code. You ask GPT-4 for a...
Building a Practical Taxonomy for AI World Models
The term world model is used almost everywhere in AI now. But the more often it appears, the less...
Audit-log every email your AI agent sends
Build a separate append-only audit trail for every message an Agent Account sends and receives — keyed by message_id and thread_id, ready for compliance and incident review.
Escalate an AI email agent's thread to a human
Build the agent-to-human handoff for an Agent Account — move a flagged thread to a review folder, pause automated replies, and let a person pick it up over IMAP.
A Passing Test Suite Is Not a Release Signal
A green CI pipeline feels reassuring. The build completed. The unit tests passed. The browser suite...
Bumblebee: Perplexity AI Open-Sources a Safe Supply-Chain Scanner
Auditing Developer Workstations: Meet Bumblebee When a new software supply-chain...
How a mesh of peer AI workspaces catches what any single agent misses
How a mesh of peer AI workspaces catches what any single agent misses Two things about...
How to add mechanical enforcement to any AI coding agent
The problem AI coding agents generate code at impressive speeds. But they also commit...
Your AI code reviewer ran my malware (85% hit rate)
Two July 2026 disclosures show AI coding agents executing planted payloads and leaking private repos, all through context the agents were built to trust.
🚫 Stop Using These Bad Coding Habits (Your Future Self Will Thank You)
Writing code is easy. Writing code that your future self (or your teammates) won't hate is the real...
I Built a Freelance Rate Calculator With AI, Shipped It, and Walked Away
Last month I shipped RateForge, a free freelance rate calculator that generates AI-powered, shareable...
Running Claude Code on AWS Bedrock: IAM, SCPs, and the Governance Model Most Teams Get Wrong
Cross-posted with permission from iqraa.tech — the full guide has the complete IAM policy, SCP...
How We Cut AI Coding Costs from $10K to $3K/Month with Task-Level Model Routing
The Problem Nobody Talks About Every AI coding tool sells you on the frontier model....
The Secret to Always-On Audio AI: Why Your Android App Needs a DSP (and How to Implement It)
Imagine you are building the next generation of "always-on" smart assistants. Your app needs to...
PVM:Give any LLM long-term memory.No API keys,no GPU,~800 lines Python.
PVM: Give any LLM long-term memory. No API keys, no GPU, ~800 lines Python. Every LLM...
A Vibe Is Not a Verdict: I Built a Tool That's Allowed to Say 'I Don't Know'
My gut screamed scam. My tool said 'I don't know' — and that refusal is what actually cracked the case. An experiment in why honest CLIs beat confident ones.