Writing
Research and field notes
Deep dives, threat analysis, and notes from the work - mostly on AI and agent security, sometimes on whatever is breaking this week.
Latest
Choosing an AI Agent Memory Service: Security and Performance Tradeoffs
Start with ownership and deletion, then measure retrieval. A runnable SQLite example tests tenant scope and records local lookup timings.
September 9, 20264 min readAI Systems
Read article
September 9, 20264 min read
How to Evaluate Tools for Securing Production AI Agents
Give a vendor a support workflow and inspect what reaches the resource APIs. Test changed approvals, alternate paths, retries, and outages.
AI AgentsSecurity ArchitectureEvaluation
September 9, 20265 min read
Tamper-Evident AI Agent Logs: Integrity, Gaps, and Limits
A valid log can still be incomplete. A small Python verifier shows what changes when you retain a checkpoint and what a compromised signer can forge.
AI AgentsLoggingIntegrity
September 9, 20264 min read
What AI Agent Assurance Claims Actually Cover
Reading an agent assurance report closely enough to find out which permissions were tested and when the results need revisiting.
AI AgentsAssuranceAccess Control