Writing
Notes on building AI that has to work in the real world.
I write on Substack about the systems behind the headlines: agents, architecture, security, evaluation, and adoption.
Featured essay
Looking Beyond the AI Vocabulary
Why many of the engineering disciplines behind AI gateways feel surprisingly familiar—and where AI genuinely introduces something new.
Read on Substack ↗
Featured essay
You Can't Govern the AI You Can't See
Three ways companies intercept AI traffic, and why each one sees something different.
Read on Substack ↗All posts
The archive
We Spent Months Building an AI Harness. Then the Model Started Ignoring It.
What a model upgrade revealed about which AI controls age well—and which only compensate for a model’s limitations.
AI Gateways, DLP and What Comes After WAF
A look at the established security disciplines behind the current AI gateway conversation.
What Claude Remembers About You Between Sessions
The memory layer isn't magic. It's a small design decision that quietly changes how every new session begins.
How AI Applications Are Being Attacked Today
Prompt injection, jailbreaks, and internal threats to AI systems.
How WAFs, CRS Rules and Virtual Patching Protected the Web
Why deterministic security models need to evolve for AI contexts.
What it actually takes to know if your AI agent is working
Evaluation metrics and their limitations for assessing AI agent performance.
What your coding assistant really does when you ask about your codebase
How different questions follow distinct processing paths within coding assistants.
What actually happens inside the model when it reasons through your document
Tracing token processing and attention from question to answer.
The AI read every page. It still answered from the wrong one.
Comparing vector-based and vectorless RAG retrieval approaches.
Building AI Became Easy. The Hard Parts Didn’t.
The production challenges that begin after a prototype works.
AI wrote the code. AI reviewed the code. Nobody caught the bug.
Five patterns to watch for with AI-assisted coding tools.
How AI Agents Actually Work
The workflows behind tools such as Cursor, Claude Code, and Devin.