First-hand engineering notes. One problem we hit, how we solved it, and the principle you can reuse.
5 min read
A read-only task lookup returned the caller’s access token, because the runtime stored the whole request metadata with the task. Where to scrub, and the trade-off it costs.
4 min read
A turn in which every step failed ended with status success and a confident answer written from nothing. Success came from the model’s done flag, not from the results.
4 min read
A tool server changes with every deploy; the grants written at provisioning do not. Read the tool list live, keep the published card as the ceiling, and say what a refresh revokes.
4 min read
The same poisoned document, two runs. Without a door, the instruction travels from agent to agent. With one, it is stripped on the way in and the redaction is written down.
4 min read
A token migration only holds if the build refuses the next hardcoded colour, off-scale spacing or ad-hoc font size. Three guards, one exception marker, and how we got to zero.
4 min read
We carry a per-request energy figure from the machine to the screen. The plumbing was easy. Refusing to display a zero was the hard part.