LatestJul 31, 2026
The Fossil Record
A dead protocol revision, fossilised in a stable SDK's type system. Why hasattr is not feature detection, and the ninety-second habit that catches the whole class.
[mcp][sdk][protocol]
7 min readread →
§ whyisthisdown //notes from the night shift
Observability, incidents,
and reliable systems — in practice.
Writing for engineering teams on observability, incident analysis, and building resilient systems. No frameworks-of-the-week — just what breaks and how to tell.
Read articles 14 articles published
§ latest writing
see all →- 11 min readmcpgovernancesecurity
The Bill Came Due Early
I predicted eighteen months of governance debt. It was called in one quarter. Six January claims, graded without mercy, against February's malware, April's RCE, and today's spec.
- 10 min readmcpgovernancesecurity
There Was No Tenant
The tenant check passed. There was no tenant — or it was someone else's. Why async tasks are where per-request governance dies, silently and by default.
- 8 min readmcpgovernancesecurity
Off By Default
MCP's biggest revision made the governance layer opt-in and off by default. Everything that keeps an agent honest is now yours to turn on.
- 8 min readmcpgovernancesecurity
The Advisory List: Why MCP Governance Lives at the Call Path
You withdrew the tool. The agent is still holding last week's menu. Why MCP governance can only live where the call is mediated.
- 13 min readobservabilityai-agentsmcp
The Agent With No Flight Recorder
OpenClaw got patched twice and still couldn't tell you what it did. That's not a security gap — it's a missing flight recorder. And the EU just gave everyone sixteen more months to pretend that's fine.
- 9 min readgovernanceeu-ai-actobservability
Sixteen Months
Sixteen months of relief — except the two soonest obligations are still seven months out, and Article 12's logging requirement is an architecture decision you can't defer. Brussels blinked. You can't.