Knowledge

Answers, not opinions.

Narrow questions answered with measurements and sources rather than opinion. Written to be useful on their own, revised when they stop being true, and dated so you can tell.

Security and audit

How do you security-audit a codebase full of AI slop?Not by scanning harder. AI-assisted code fails differently from human code: syntax errors and logic bugs fall, while privilege-escalation paths and architectural flaws rise sharply — defects that pass every linter because each individual line is correct. A useful audit ignores line-level patterns and goes after the four surfaces static analysis is blind to: authorisation boundaries, credentials and machine identity, dependency provenance, and what your agents are actually allowed to touch.

Answers, not opinions.Answers, not opinions.

Security and audit

Answers, not opinions.