Writing
Notes on AI, security, and building things.
-
Building an OpenClaw Agent with Memory, Tools, and Trusted Workflows
A practical walkthrough of how I set up OpenClaw as a personal AI operating system, what choices mattered, and why useful agents need more than a good model.
-
Securing a Personal AI Agent with Hardening, Secrets, Boundaries, and Approvals
A practical security deep dive on running a personal AI agent with real tools, local memory, secrets, approvals, and workflow boundaries without turning it into a liability.
-
Supervising AI While Building the Platform You Write On — Lessons from an Astro + TinaCMS Migration
A practical account of using Claude Code to migrate a personal site to Astro and then layer on a TinaCMS publishing workflow, with notes on what the AI got right, what it got wrong, and why the muscle of supervision matters for AI, cybersecurity, and teaching.
-
What Building Two iOS Apps with AI Taught Me About the Real Security Risks of Agentic Coding
A cloud security practitioner's notes on three patterns that emerged while shipping two iOS apps with AI coding tools — and what they imply for security teams.