5 min read
Multi-agent systems: when it helps
Most multi-agent demos don't beat one well-prompted agent. When coordination is worth the added latency and failure surface, and when it's overhead.
#agents
7 posts tagged agents.
5 min read
Prompt injection: defenses that work
Chunk-level allowlisting, output filtering, privilege separation for agents. Concrete defenses against retrieved-content injection, not the theory.
6 min read
Authentication vs authorization
Authentication is a fact you establish once. Authorization is a decision you make on every request — and that gap is where most access-control bugs live.
4 min read
When not to use an agent
Most problems people reach for an agent to solve are workflow problems with extra steps. A decision framework for telling the two apart before you build.
6 min read
What to log for an AI agent audit trail
Not legal advice — the five-field logging pattern I'd want on any agent that takes real actions, and why a log you cannot replay is only a transcript.
5 min read
5 LLM agent failure modes in production
Tool-use loops with no exit, hallucinated arguments, state leakage, over-confident planning, retry storms — five failures I keep seeing, and what stops each.
12 min read
MCP breaking changes and how to migrate
The 2026-07-28 MCP spec ships a stateless core, deprecates Roots, Sampling and Logging, and assumes OAuth 2.0. What breaks, what to migrate, and when.