Field notes · the journal
AI tooling, hardening, the gap between demo and production.
4entries
Filtering: security. Clear
A second scanner on a shared engine: what an audit of the MCP servers configured on my own machine turned up, why `npx -y` is a standing order you signed, and how the bedrock auditor's reporting engine became a second product in days rather than months.
MCP · SECURITY · SUPPLY-CHAIN · AI · NPM
In 44 BC, Rome's most devoted republicans stabbed Caesar to stop a monarchy and got an empire. In 1902, French administrators in Hanoi offered a penny per rat tail and got rat farms. Both disasters share a cause. So does the way we are building AI.
Running Claude Code in Docker Sandboxes
DOCKER · CLAUDE-CODE · AI-AGENTS · SECURITY · DEVOPS