Open padlock resting on a computer keyboard.
9 min read ai, agent, security

Excessive Agency Is a Reliability Bug, Not Only a Security Risk

When an agent is allowed to act too broadly, the risk is not only leakage or abuse. It also becomes hard to operate: it works outside scope, repeats actions, burns budget, and fails without a clean way back.

Two people working side by side at screens with code.
8 min read ai, code-review, developer-experience

When Commits Scale Faster Than Reviews

Code volume is growing faster than human review capacity. The problem is not using AI, it is pretending review still costs the same.

Person drawing an architecture diagram on a tablet, with screens and code in the background.
7 min read ai, agent, llm

Meta Harness: the missing layer in agent engineering

The agent is no longer the whole product. The next jump is the layer above it: memory across sessions, coordination across agents, context across repos, and automatic optimization of the harness itself.

Workflow diagram, product brief, and user goals arranged on a table.
10 min read ai, agent, llm

Domain-specific agents: composition against the bloated agent

The generic agent looks simple until it becomes a giant context window with too many tools, too many permissions, and too much cost. Domain-specific agents trade that accumulation for composition, clear boundaries, and cheaper execution.

16 min read ai, agent, go

Building Real AI Agents with the Copilot SDK in Go

If you follow the GitHub Copilot ecosystem, you have probably heard of *.agent.md files. They are great for simple things, basically a boosted prompt that runs inside Copilot