Articles
The Grant Table Is the Kill Switch: Access Control for a Shared AI Employee
Several people share one autonomous agent: the identity provider proves who they are, but a grant read live on every request decides whether they still get in.
What an Agent May Do Is Not How It May Start
One authorization setting was answering two unrelated questions. Splitting exposure from initiation is what made the entitlement model enforceable.
Bake Every Author-Built Connector In, Keep It Inert Until Bound
When a vendor has no MCP server you author your own. The real decision is where that connector code lives: baked into one shared image, inert until bound.
Template Gives You Consistency, Not Credibility
Per-vertical content a practitioner respects cannot be stamped from one template. Depth at altitude takes serial authoring through an adversarial critique loop.
Ground It or Flag It: Ending Agent Confabulation
The agent failure to fix is not guessing - it is confident, unmarked inference dressed as fact. The cure separates disclosure from verification.
An Agent Should Write the Script, Not Be the Loop
When an agent task burns money, the reflex is to make the run survivable. Often the real fix is upstream: the agent should write the script, not be the loop.
We Accidentally Built a Shadow System of Record
A review caught our agent console rendering the customer's own data back to them. We had built a shadow system of record nobody designed.
claude.ai as a Routing Surface, Not a Content Generator
MCP turns a conversation interface into a capable operator by exposing production tools directly - the LLM becomes the routing layer, not a content generator.
Overlay Drift: The Fleet Observability Gap That Looks Like a Deployment
Deploying a new overlay version does not mean all instances have it - persistent processes require active drift detection, not deployment confirmation.