Posts
Independent essays on AI-native work patterns, agent infrastructure, and what actually works when running agents as real tools.
-
I Pointed an AI Code-Security Tool at My Own Control Plane
Corridor reviews AI-generated code inside the coding loop instead of after commit. I imported a real AWS control plane, planted an IDOR bug in a PR, and watched what it caught.
-
What Actually Gets Stored When You Put a Vector in S3 Vectors
A vector store keeps three things per record — a key, an array of floats, and a bag of metadata. Your document text is stored as metadata, and a 2 KB limit on the filterable part is what quietly breaks ingestion.
-
Which Tier Does Your Vector Workload Live On?
Amazon S3 Vectors dropped the entry cost of vector storage on AWS to near zero. The question that matters now is which tier of the cost/latency curve your workload sits on — and why agents belong on the cheap one.
-
Zed on Bedrock Makes the Agent Harness Portable
Wiring Zed to Amazon Bedrock turns Zed's agent harness into a provider-portable coding surface across the frontier models your account can reach.
-
Agent Sprawl Is a Skills Problem
I had hundreds of skills scattered across agent harnesses, repos, and drafts folders. No single view of what existed, what was current, or what was actually wired in. The market is hitting the same wall.
-
Go-to-Market Was a Relay Function. AI Makes It a Decision Function.
The traditional go-to-market role was designed as a last-mile relay — carrying product decisions to customers. AI collapses that relay into a decision loop. The org chart hasn't caught up.
-
Your Agent Doesn't Need the Secret. It Needs the Result.
Vault-backed credentials are the floor for agent security, not the ceiling. The pattern converging across 2026 security research goes further: scope vaults to the task, expire tokens with the task, and broker credentials so the agent never holds one at all.
-
AI Subscriptions Are Secretly Usage Models
Claude, ChatGPT Codex, Cursor, Devin, Copilot, Gemini, Perplexity, and Grok all look like subscriptions. The real product is the reset policy, the overflow rule, and how much autonomous work you can squeeze out before the meter shows up.