Tag

Architecture

4 posts

October 2026

The Instruction Was in the Ticket: Designing LLM Agents That Survive Prompt Injection EchoLeak, the GitHub MCP leak, and the Supabase support-ticket exfiltration all had the same shape: an agent read text an attacker wrote, and that text chose the agent's … Research 27 min read

July 2026

Licenses That Can't Kill: Designing Commercial Licensing Without a Kill Switch Every runtime license check on a serving path is a kill switch someone else's outage, bankruptcy, or sanctions-compliance lawyer can pull. The documented record — … Research 21 min read The Bot That Opened Merge Requests: Push vs Pull for Config, Credentials, and License Distribution When an artifact expires and renews on a schedule — a TLS certificate, a software license, a signing key set — somebody has to move the fresh copy to everyone who needs … Engineering 18 min read

June 2026

The API Key Is the Tenant: Identity Models That Survive Multi-Tenancy Most cross-tenant data leaks are not exotic exploits; they are a missing WHERE clause, a trusted X-Tenant-ID header, or a query that resolved the tenant from one input … Engineering 19 min read

All posts