Blog
Notes on software engineering, distributed systems, AI, and whatever I'm currently taking apart.
Bounded autonomy: deterministic workflows and metrics for coding agents
Agents can work autonomously, but guarantees must live outside the model: in programmatic workflows, deterministic gates, and verifiable metrics.
Axios supply-chain attack: how to protect yourself
Two compromised axios releases installed a cross-platform RAT. These settings reduce the risk in npm, Bun, and Python.