Building thoughtful software with AI.Notes from the systems behind the work.
The runtime between my coding model and the machine said yes to any shell command that started, ignored its own program allowlist, read dash-led search words as flags and fenced files into one machine's folder. One change made each of those tell the truth, and a couple of questions are still open.
Read moreThe first join between agent hook events and the transcript needed a tag inside the conversation. The fingerprint matcher that replaced it the same day leaves the prompt alone, but a start and its end now fight over one record.
A checkpoint added an MCP endpoint to my observability tool that validates the request envelope, then runs any registered tool with whatever repository ID the caller typed. Canned data is the only reason nothing real has leaked.