6 min read
The job was never the code
Most of my code is now written by an agent, and my output went up rather than down. That is not a story about typing speed. It is about what the job always was underneath the typing.
Architecture
11 posts
4 min read
Metering tokens when the bill is the product
Billing per message is easy and wrong: one user sends a sentence, another uploads a report. Metering the tokens you actually spend is harder, and the hard parts are idempotency, allowance checks and what to do mid-conversation.
4 min read
Route cheap models to orchestration, not to the work
Most agent platforms pick one model and use it everywhere. Splitting model selection by role rather than by task is where the cost curve actually bends.
4 min read
Citations that survive the question
A RAG answer with a source name under it is not a citation. If a teacher cannot open the page and see the sentence, the system has not shown its work. Carrying page numbers through retrieval is most of the job.
4 min read
One Durable Object per agent
Why I gave every AI agent its own Durable Object with a SQLite task ledger, and what that bought in state, concurrency and debuggability.
4 min read
Sandboxing code an agent wrote for you
Once an agent writes and runs code, you are executing untrusted input on your infrastructure. The isolation question has known answers. The harder problems are quotas, cancellation and getting results out.
4 min read
Crawling a knowledge base without a crawler service
Rendering every page in a headless browser is the expensive way to import a website. Discovery through robots.txt and sitemaps costs almost nothing, and most pages never need a browser at all.
4 min read
Confidence scores are only useful if something acts on them
An LLM that returns a per-field confidence score has told you nothing until a threshold routes the low ones to a person. How to design the routing, calibrate the threshold, and build a review queue people can actually clear.
4 min read
Signing webhooks, and the SSRF hole nobody patches
Most webhook guides stop at HMAC signatures. The bigger risk is on your side: a customer-supplied delivery URL turns your sender into a proxy for your own private network. Here is the full path.
5 min read
An event-sourced ledger a regulator can replay
Regulated lending needs a financial history you can reconstruct, not one you infer from mutable rows. Event sourcing plus double-entry bookkeeping gives you that, provided you get the arithmetic and the correction path right.
5 min read
Alarm-driven task queues without a queue service
A Durable Object alarm gives you a scheduler, a retry policy and exactly-one-worker-per-task, using storage you already have. Here is how to build a task queue on it, and where it stops being the right tool.