skip to content

Writing

Field notes from shipping AI systems — the parts that only show up in production. No model-of-the-week commentary.

2026-07-202 min read

Designing an MCP server an AI agent can't misuse

Guardrail patterns from building a production MCP server: scoped OAuth, idempotency keys, destructive-action confirms, and why the agent should never hold your credentials.

2026-07-102 min read

The first internal AI tool your company should build

Skip the chatbot. The highest-ROI first internal AI tool is a drafting system with a human approval stage — here's how to pick and scope it.

2026-06-282 min read

What an AI voice agent actually takes in production

Lessons from ~83,000 lines of production voice-AI code: the demo is 5% of the work. Here's the other 95% — interruptions, escalation, booking edge cases, and workflow control.