The Blog

Field notes from the build

Deep dives on the AI agents, automations, and developer workflows I build to save engineers hours every week — with the code, the dead ends, and what actually shipped.

Security
· 6 min read

Cloudflare OS deep dive: safety, trade-offs, and customizing it on day one

I reviewed open-source Cloudflare OS for call-home behavior, the Gatekeeper security model, and how hard it really is to make it *your* company OS.

Read →
Security
· 10 min read

Is diri safe to install? A security review of the multi-agent macOS orchestrator

I audited diri's trust model, install path, remote access, and MCP blast radius — then laid out the field trial for part two.

Read →
Prompt Engineering
· 7 min read

AI Engineer Coach: the feedback loop prompt engineering needs

Microsoft's local-first coach turns real coding-agent sessions into practical feedback on prompt quality, context, repeatable skills, and healthier workflows.

Read →
Security
· 6 min read

Is Alibaba Open Code Review safe for GitHub Actions?

I traced where the code goes, how the Action updates itself, and which GitHub permissions it needs—then built the hardened setup I would actually test.

Read →
AI Agents
· 7 min read

Building my first production AI agent

What I learned taking an agent from a weekend prototype to something I trust to run unattended — tools, guardrails, and the loop that finally made it reliable.

Read →
Automation
· 6 min read

Automating my inbox with n8n and Claude

A no-drama workflow that triages email, drafts replies in my voice, and hands me only the decisions that actually need a human. Here's the whole build.

Read →

Newsletter

Get new posts in your inbox