Skip to main content

Articles

Field notes

Everything I’ve published from the seat — 69 field notes on running engineering when agents do the executing and I stay accountable for the outcome.

Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room

Agents don’t just write code anymore. They run ops, security, QA, data, and support, around the clock, while we still govern them with a team …

I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers

A guide for engineering managers on growing junior developers in an AI-heavy world, and for junior developers who want to stand out beyond just being …

AI Makes Code Cheap to Produce. Not Cheap to Own.

AI accounts for 42% of committed code. 96% of developers don’t fully trust the output. Only 48% always verify before committing. The gap between …

Stop Reviewing Code. Start Reviewing Evidence.

Agent-heavy teams ship twice the PRs at more than twice the size, and reviews wait almost five times longer for pickup. The review model built for …

AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.

The culture shifted. ‘Ship fast with AI’ became the expectation. Anyone who slows down to think looks unproductive. Discipline became a …

Execution moved to agents. The work — and who owns it — did not.

Developer Work Did Not Change. The Sequence Did.

AI doesn’t make the job different. It changes when parts of the job happen, turning Monday morning from archaeology into editing.

When AI Writes 90% of Your Code, What Are You Actually Doing?

Anthropic’s CEO says Claude writes 90% of code for most teams. If you think that means developers are obsolete, you’ve missed the point …

Org Charts for AI Agents: Mapping Your Human and AI Workforce

AI agents aren’t coming. They’re already here, doing real work, while most organizations are still debating how to use ChatGPT. If …

Alberta Scanned 466 Million Lines of Code in 20 Hours. The Architecture Is the Story.

A Canadian province ran Claude Code across 466 million lines of government code in 20 hours — work they priced at 6.5 years the old way. The number …

The IDE Is Becoming Mission Control

Cursor 3 rebuilt its UI around agents. GitHub calls Agent HQ ‘mission control.’ VS Code is ‘your home for multi-agent …

From "Toys" to "Tools": The Missing Layer Developers Actually Need

AI coding isn’t about clever completions anymore. It’s about stitching work together so results cross the threshold from toy to tool—from …

Cheap to produce is not cheap to own. The bill arrives downstream.

AI Makes Code Cheap to Produce. Not Cheap to Own.

AI accounts for 42% of committed code. 96% of developers don’t fully trust the output. Only 48% always verify before committing. The gap between …

AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.

The culture shifted. ‘Ship fast with AI’ became the expectation. Anyone who slows down to think looks unproductive. Discipline became a …

The Vibe Coding Backlash Is Right. Seniors Are Losing the Argument Anyway.

Forbes just said vibe coding will break your company. Senior engineers are organizing against it. The data is on their side: independent audits keep …

Make the Cheap Path the Default. Make the Expensive Path Prove It.

Half of most AI agent bills is waste with a good story: context pollution, verification theater, tool schemas nobody reads, retries nobody capped. …

SaaS Is Dead. We Just Haven't Stopped Paying for It Yet.

The bargain that powered SaaS for two decades was simple: rent generic software because custom is too expensive. That bargain is breaking. The cost of …

Ship Faster Without Breaking Things: DORA 2025 in Real Life

AI is making teams faster, but instability persists. The 2025 DORA report reveals which organizational capabilities turn AI into a force …

The scarce asset — and how engineers grow it when AI does the typing.

I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers

A guide for engineering managers on growing junior developers in an AI-heavy world, and for junior developers who want to stand out beyond just being …

What's Holding You Back from Succeeding in the AI Era?

I’ve watched teams double their output with AI, and I’ve also seen developers stall and managers struggle. The difference isn’t the …

The End of Courses: Learn From AI Like a Toddler, Or Become Obsolete

Remember when shipping an app meant 40 hours of video courses and weeks of syntax memorization? An agent builds it in three minutes now. The 40-hour …

Hiring Developers in the Age of AI: What Actually Matters Now

LeetCode is dead. With AI writing the code, we need to fundamentally rethink how we identify and hire the developers who will actually thrive in 2025 …

Supervision as architecture: control rooms, evidence gates, agents on the org chart.

Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room

Agents don’t just write code anymore. They run ops, security, QA, data, and support, around the clock, while we still govern them with a team …

Stop Reviewing Code. Start Reviewing Evidence.

Agent-heavy teams ship twice the PRs at more than twice the size, and reviews wait almost five times longer for pickup. The review model built for …

Everyone Trained Their Engineers on AI. The Gap Didn't Move.

82% of organizations now offer AI training. 59% still report a skills gap. Security spent twenty years and 19,500 employees learning why: knowledge …

The One-Man Show Company. Don't Let the Monkeys Touch Production.

A company used to start with people. Now it can start with one person and a swarm of AI agents that draft, build, test, sell, and support faster than …

The Context Engine: What Comes After We've Solved Code Generation

We’ve largely solved the context problem in AI coding tools. RAG systems ingest our docs, codebase-aware assistants understand our architecture, …

CLI Agent Orchestrator: When One AI Agent Isn't Enough

AWS open-sourced CLI Agent Orchestrator, a framework coordinating multiple AI agents for complex developer tasks. It’s hierarchical …

Agents are an insider workforce. Secure them like one.

Prompt Injection 2.0: The New Frontier of AI Attacks

·1631 words·8 mins
Prompt injection has evolved from toy demos to sophisticated attacks targeting production AI systems. What was once a curiosity is now a genuine …

Building AI Systems That Don't Break Under Attack

Understanding the threats is step one. Building defensive architectures that actually work in production is step two. Here’s what’s …

Securing the AI Supply Chain: The Threat Nobody's Talking About

·2088 words·10 mins
We’re building AI systems on top of models, datasets, and tools we don’t control. The supply chain is the attack vector nobody’s …

AI Security Isn't a Tool Problem, It's a Culture Problem

You can implement every technical control and still get breached if your culture doesn’t support security. The final piece of AI security …

'I Only Built a Small Script for Myself.' That Might Be the Most Dangerous Sentence in Your Company.

35% of developers access AI coding tools through personal accounts. AI lets one person bypass every paved road the organization built, very fast and …

Your AI Browser Can Be Hijacked by a Single Webpage. Here's How Companies Are Fighting Back.

AI browsers that summarize pages and automate tasks are vulnerable to prompt injection—hidden instructions in web content that can hijack the AI. …

Glassworm Is Back. Your Code Review Won't Catch It.

151 malicious packages in one week. The payload is invisible. Literally invisible. Glassworm uses Unicode characters that don’t render in any …

Web Bot Auth: Giving Bots a Crypto ID Card in a World of Fakes

Bots are everywhere, and you can’t tell the real ones from the fakes. Web Bot Authentication uses cryptographic signatures to give automated …

Hands-on: agents, RAG, MCP, and the tooling underneath — no hype.

Build Your First AI Agent This Week: A Practical Guide

Stop reading about AI agents and build one. Here’s the step-by-step path: picking the right problem, setting up your tools, building a working …

AI Agents for Real Productivity: What Works in 2025

Beyond the hype and the demos, what actually works when you build AI agents for real work? Here’s the landscape, the platforms worth using, and …

RAG for Developers: A No-BS Introduction

·1042 words·5 mins
Developers keep asking me to explain RAG. Here’s the straightforward explanation: it’s the difference between an AI that makes stuff up …

So, You've Built a RAG. Now Let's Make It Not Suck.

Your basic RAG works in the demo. It falls apart with real users. Here’s how to upgrade from a fragile prototype to a production system that …

Model Context Protocol: The Missing Connection Between AI and Your Real Work

Your AI coding assistant is blind to your company’s actual context. MCP fixes that. Here’s how to connect Claude, ChatGPT, and Cursor to …

The Magic Behind AI IDEs: How Cursor, Windsurf, and Friends Actually Work

Everyone’s using AI IDEs but few understand what’s happening under the hood. Let’s demystify how these tools work, why they differ, …

The Context Problem: Why AI Can't Remember You Across Apps (And Why That's Not an Accident)

Every time you switch from Claude to ChatGPT, you start from zero. It’s not a bug. It’s architecture. Here’s the real engineering …

Your AI Agents Are Flying Blind. Here's How to Fix That.

Every AI agent in your org starts every session with zero context. No business rules. No architecture decisions. No conventions. The code they …

News through an operator's lens — what launches mean for how orgs run.

I Don't Put All My Eggs in One Basket. Anthropic Is Making That Hard.

Anthropic shipped 120+ features in 90 days, then blocked OpenClaw from using Claude subscriptions. The same company building the best developer tools …

Cursor Automations: Your AI Just Stopped Waiting for Permission

Cursor shipped Automations on March 5. AI agents now trigger from Slack messages, Git pushes, PagerDuty alerts, and timers. No human in the prompt …

Claude Can Now Use Your Computer. Here's What That Actually Means.

Anthropic just shipped computer use for Claude. It can click, scroll, navigate your browser, open files, run dev tools, and submit PRs. Pair it with …

GitHub's Double CLI Release: How Two AI Tools Are Reshaping Development Workflows

GitHub released two different CLI tools for AI in one week. Together, they represent both interactive AI partnership and autonomous development …

The Agentic Commerce Protocol: We Just Gave Every LLM the Ability to Buy Things

OpenAI and Stripe just released a new protocol that lets AI agents complete purchases. This is the HTTP moment for AI commerce, and we need to talk …

The Uneven Reality of AI Adoption — What Anthropic's New Report Tells Us

AI adoption has exploded from 20% to 40% of U.S. workers in just two years. But Anthropic’s new Economic Index reveals a troubling pattern: the …

OpenAI Killed Sora. That Tells You Everything About Where AI Is Actually Heading.

OpenAI shut down Sora, killed a $1 billion Disney deal, and pivoted to enterprise and robotics. The most-downloaded AI video app on iOS, gone. This …

Two Weeks with Gemini in Chrome: The Browser That Actually Gets It

·1015 words·5 mins
After two weeks of daily use, Gemini in Chrome has fundamentally changed how I browse the web. Here’s what works, what doesn’t, and why …

202632

  1. Rethinking the SDLC: Execution Is No Longer the Constraint
  2. Everyone Trained Their Engineers on AI. The Gap Didn't Move.
  3. Make the Cheap Path the Default. Make the Expensive Path Prove It.
  4. Alberta Scanned 466 Million Lines of Code in 20 Hours. The Architecture Is the Story.
  5. Stop Reviewing Code. Start Reviewing Evidence.
  6. Agentic Overwatch: Why Your Next Dev Team Will Look Like a NASA Control Room
  7. The One-Man Show Company. Don't Let the Monkeys Touch Production.
  8. 100 Days to the EU AI Act Deadline. Your Engineering Team Hasn't Started.
  9. The Vibe Coding Backlash Is Right. Seniors Are Losing the Argument Anyway.
  10. The End of Courses: Learn From AI Like a Toddler, Or Become Obsolete
  11. I Don't Put All My Eggs in One Basket. Anthropic Is Making That Hard.
  12. The IDE Is Becoming Mission Control
  13. Your AI Stack Is Rented Until You Can Run Part of It Yourself
  14. AI Makes Code Cheap to Produce. Not Cheap to Own.
  15. 'I Only Built a Small Script for Myself.' That Might Be the Most Dangerous Sentence in Your Company.
  16. The Claude Code Leak Isn't Dramatic. That's the Point.
  17. Cisco Built an LLM Security Leaderboard. You Should Care Even If You Don't Use Cisco.
  18. OpenAI Killed Sora. That Tells You Everything About Where AI Is Actually Heading.
  19. Claude Can Now Use Your Computer. Here's What That Actually Means.
  20. DeerFlow 2.0: ByteDance Just Open-Sourced What Most Companies Are Trying to Build Internally
  21. Zuckerberg Is Building an AI CEO Assistant. The Rest of Us Should Have Started Already.
  22. Cursor Automations: Your AI Just Stopped Waiting for Permission
  23. AI Is Now Reviewing AI's Code. That Should Make You Think.
  24. Glassworm Is Back. Your Code Review Won't Catch It.
  25. WordPress Just Let AI Agents Publish to 43% of the Web. Now What?
  26. AI Didn't Replace Software Engineering. It Made Bad Engineering Easier to Ship.
  27. SaaS Is Dead. We Just Haven't Stopped Paying for It Yet.
  28. Google Stitch Just Made UI Design a Developer Skill
  29. OpenClaw Is Not a Chatbot. It's a Personal Agent Gateway.
  30. Open WebUI Isn't a ChatGPT Clone. It's AI Infrastructure.
  31. NotebookLM Is Not a Chatbot. It's a Research Workbench.
  32. Your AI Agents Are Flying Blind. Here's How to Fix That.

202537

  1. Org Charts for AI Agents: Mapping Your Human and AI Workforce
  2. Web Bot Auth: Giving Bots a Crypto ID Card in a World of Fakes
  3. CLI Agent Orchestrator: When One AI Agent Isn't Enough
  4. AI Wrapper Companies: Is This Real or Just API Theater?
  5. Amazon S3 Vectors: When Storage Learns to Think
  6. Your AI Browser Can Be Hijacked by a Single Webpage. Here's How Companies Are Fighting Back.
  7. Have You Seen All These OpenAI Blueprints? What the Heck Are They Doing, and Why Is (or Isn't) Your Country In?
  8. Krakow Offsite: Real Connections, Real Momentum
  9. When Nvidia's CEO Says 100% of Engineers Use Cursor, He's Not Exaggerating
  10. When AI Writes 90% of Your Code, What Are You Actually Doing?
  11. Securing Intelligence: The Complete AI Security Series [Video]
  12. AI Security Isn't a Tool Problem, It's a Culture Problem
  13. Securing the AI Supply Chain: The Threat Nobody's Talking About
  14. Building AI Systems That Don't Break Under Attack
  15. Prompt Injection 2.0: The New Frontier of AI Attacks
  16. AI's Dual Edge: When to Disrupt and When to Compound
  17. Grokipedia and the New Era: When Building a Wikipedia Becomes Trivially Easy
  18. Two Weeks with Gemini in Chrome: The Browser That Actually Gets It
  19. Google Jules: Always on My Radar, But Never Quite the Star
  20. Ship Faster Without Breaking Things: DORA 2025 in Real Life
  21. Build Your First AI Agent This Week: A Practical Guide
  22. AI Agents for Real Productivity: What Works in 2025
  23. What's Holding You Back from Succeeding in the AI Era?
  24. Model Context Protocol: The Missing Connection Between AI and Your Real Work
  25. The Context Problem: Why AI Can't Remember You Across Apps (And Why That's Not an Accident)
  26. The Agentic Commerce Protocol: We Just Gave Every LLM the Ability to Buy Things
  27. The Magic Behind AI IDEs: How Cursor, Windsurf, and Friends Actually Work
  28. Developer Work Did Not Change. The Sequence Did.
  29. GitHub's Double CLI Release: How Two AI Tools Are Reshaping Development Workflows
  30. So, You've Built a RAG. Now Let's Make It Not Suck.
  31. Hiring Developers in the Age of AI: What Actually Matters Now
  32. RAG for Developers: A No-BS Introduction
  33. The Uneven Reality of AI Adoption — What Anthropic's New Report Tells Us
  34. The Context Engine: What Comes After We've Solved Code Generation
  35. I'm Pro-AI. That's Exactly Why I'm Worried About Our Next Senior Engineers
  36. When CI/CD Speaks Human: A Friendly Nudge to DevOps (and Developers)
  37. From "Toys" to "Tools": The Missing Layer Developers Actually Need