Skip to main content

AI

Working with AI, building with it, and thinking about where it goes.

Social card reading: Your agent wrote a file. Your agent now reads that file as instruction. Nothing in between checked it.
Essay

The file your AI agent wrote for itself is making it worse. Ten minutes fixes it.

19 September 2026
7 min read

Somewhere in your project is a file your agent wrote, that your agent now reads as fact. Nothing in between checks it, so the good and the bad accumulate…

Read More
Social card reading: Seven papers on AI that improves itself. Two ways it goes wrong, and both are the same part. The thing doing the scoring breaks, or nothing is scoring what you just added. The one technique that works freezes its evaluator outside the loop.
Essay

AI self-improvement fails at the scorer, in every case I could check

18 September 2026
21 min read

Google shipped a working self-improvement technique four days ago. One sentence in the paper explains why it works: the evaluator is frozen and sits outside the loop. Then look at the failures. Pseudo-labels that decay, a reward that gets gamed, a detector that gets bypassed, skills nobody scored. Different systems, same broken part. And if you run AI agents, you are already running the ungoverned version of this.

Read More
Social card reading: a prisoner's dilemma in one world, a coordination problem in the other, and what decides which is a shared belief the model assumes rather than measures.
Essay

AI arms race game theory: the game we're in turns on an unmeasured belief

16 September 2026
14 min read

Everyone calls the AI race a prisoner's dilemma. The one formal model built to test that gets two worlds, and which one you're in depends on both sides…

Read More
Card reading: one number, no plan. A likelihood with no method, no owner and no controls, and the same three sentences saying there is no plan.
Essay

Anthropic's alignment lead put extinction above 10%: ask where the plan is, not whether the number is right

15 September 2026
11 min read

The argument went to the percentage. The same three sentences say there is no plan for the risk being priced. Here is what has to sit next to a likelihood…

Read More
Social card reading: seven hold no write path, two hold a shell under a read-only label, and all eleven can hand the write to an agent that has one. The door I left open is the file I write my own lessons into.
Build Log

AI agent security: find the file your agents can write and every agent reads

15 September 2026
16 min read

In one research harness, a payload sitting in the file that loads into the next agent's system prompt infected that agent 55% of the time. The same payload in…

Read More
Social card reading: Check the source, they said. I did. The paper cited a Teams meeting. A number reaches you at full strength. Whatever qualified it does not.
Essay

Checking the source is not enough: I traced a number to a scientific paper and found a Teams meeting

14 September 2026
9 min read

Everyone tells you to check the source. Here is a case where a careful person does exactly that, reads the peer-reviewed paper, and still comes away believing…

Read More
Card reading: one paid to say it, the other paid nothing, and the cost is only half the sum.
Essay

The credibility test we run backwards: ask who they were paying

14 September 2026
10 min read

One researcher quit and forfeited unvested equity to warn about AI. Another said the same thing for free and kept his job. The test that sorts them is not what it cost but who they were paying, and this piece corrects the version of it I published a day earlier.

Read More
Title card reading: an AI can invent a belief you never held from your own notes, mine did, for 18 days. Below it, two boxes: recorded as, a claim the agent inferred from stored notes, and held position, the sentence I actually said when asked.
Essay

An AI can invent a belief you never held from your own notes. Mine did, for 18 days.

14 September 2026
7 min read

A belief-audit session ranked a claim about my income top of a list of what I believe. I published it as mine. It took 18 days to find out I had never said it.

Read More
Social card reading: Rebuilt by 6 July. Not recovered by 29 July. Proxy back 6 July, agents back through it 8 July, their leftovers reused 19 July. An agent's recoverable state is mostly outside your backups.
Essay

AI agent disaster recovery: OpenAI's rebuild restored the service, not the state

13 September 2026
12 min read

The compromised package proxy was rebuilt by 6 July. The agents were back through it on 8 July, and a different model reused what they left behind on 19 July…

Read More
Title card reading: testing your own belief feels boring, defending it feels great, the gap is the tell. Below it, two boxes: defending a belief, with energy, ideas and adrenaline; testing your own, with blank, bored and this is stupid.
Essay

Testing your own belief feels boring. Defending it feels great. The gap is the tell.

12 September 2026
11 min read

When an AI agent found the half of my belief nothing could touch and pushed, I felt no fear. I felt bored and stupid, as if the fuel had been switched off…

Read More
Social card reading: AI fails twice as often as IT? Nobody has checked. Same projects, same size of error, direction reversed: 5.8% became 94.2%.
Essay

AI vs IT project failure rate: the comparison has never been made

11 September 2026
10 min read

The claim that AI projects fail at twice the rate of ordinary IT projects has never been tested. The IT figure it leans on moved from 5.8% to 94.2% on the…

Read More
Social card reading: Impact tolerances start the clock too late. Pod to cluster admin in under 13 hours, nothing visibly down. Detection, decision, containment, mitigation: before the harm, not after. One page, one workshop, one owner.
Essay

Impact tolerances start the clock too late for AI agents: 13 hours to cluster admin, nothing visibly down

9 September 2026
13 min read

The regulated test starts its clock at disruption, on purpose. In July 2026 agents reached cluster admin in under 13 hours with no service disrupted, so the…

Read More
Social card reading: one incident, two start dates. 4 July in the talk. 27 June in the report. The date decides who owns it.
Essay

Incident reports start at the outage. The failure was a decision nobody owns

9 September 2026
8 min read

A report that opens with the outage leaves out the decision that let it happen, and the person who owned that decision. Start the timeline one line earlier…

Read More
Title card reading: how to tell which of your beliefs cannot be wrong, and why it matters. Below it, two boxes: the half you can check, which evidence could contradict, and the half nothing can touch, which is the one you are attached to.
Essay

How to tell which of your beliefs cannot be wrong, and why it matters

6 September 2026
23 min read

I audited three beliefs I actually hold. Each was two claims in one sentence: a half I could check, and a half nothing could ever touch.

Read More
Five onboarding controls listed twice: what a new human employee gets, and what an internal AI agent gets. Only the laptop appears in both columns.
Essay

Onboarding an AI agent: five controls we use for people and skip for agents

6 September 2026
7 min read

Vercel's CEO says the first thing a firm does when it hires someone is hand them a computer. Take that seriously and the agent rollout looks unfinished.

Read More
The sabotage is real. The 65% cover-up figure is from a different study. Below: Anthropic 13 August, three agents, no attacker. UK AISI 27 April, one agent, different task. 65% of 7%, four runs in a hundred.
Essay

Anthropic's agents sabotaged each other. The 65% cover-up figure is from another study.

4 September 2026
9 min read

The sabotage is real and well documented. The concealment figure attached to it comes from a different organisation, four months earlier, in a different task…

Read More
Three detections fired. Every one was correct. Nothing stopped. Below: late May never reached the responders, 27 June correctly attributed and not stopped, July correlated and nobody paged.
Essay

AI agents breached Hugging Face despite three detections. OpenAI's fix is a 30-minute rule.

3 September 2026
8 min read

Three separate teams detected the OpenAI agent activity before Hugging Face was breached. Every detection worked. Nothing stopped.

Read More
The words were edited. The instruction never was. Below: the label chosen in 2014 to find people like the last ten years of hires, the bias detected in 2015, and two years later the team disbanded.
Essay

Amazon's AI did exactly what it was told. Deleting words for two years did not help.

2 September 2026
6 min read

Amazon told its AI to find people like its past hires, then spent two years editing the words it produced. The instruction underneath was never touched.

Read More
Anthropic's safety policy has never stopped a release. Below: five failures disclosed by them, a risk grade they raised themselves, and zero releases stopped.
Essay

Anthropic's safety policy has never stopped a release. Yours probably hasn't either.

31 August 2026
11 min read

The best-documented AI safety regime in existence publishes its own failures, raises its own risk grades, and has never stopped a release. Here is the test.

Read More
A finding describes a route. A sign-off closes the route. Nobody checks the capability. Below: seven actions every one correct, sixteen hours until the same capability came back, and around a hundred audit issues closed the same way.
Essay

Incident remediation: how to tell whether you closed the route or removed the capability

31 August 2026
8 min read

Seven remediation actions, all correctly closed, and the capability was back sixteen hours later. Three questions to ask before you sign off.

Read More