This is a personal blog. All opinions are my own - not my employer’s. There’s apparently a new category of security incident called AI escape. Except there isn’t. That phrase might be useful shorthand for headlines, and some of the incidents behind it are genuinely serious, but I think …

This is a personal blog. All opinions are my own - not my employer’s. At some point over the last few months, I accidentally built a control plane for coding agents. This was not the plan. The plan, to the extent that there was one, was much smaller and much more normal. I wanted coding agents to …

The next generation of supply chain attacks aren’t targeting packages. They’re targeting repositories. The June 2026 Azure Functions incident may be a glimpse into what that future looks like.

FinOps for Delegated Cognition: GitHub Boiled the Frog Backwards Yesterday started with me staring at a tiny dashboard called CopeLimit. This is not, admittedly, how most normal people choose to spend a Monday morning. Most people, when confronted with a major billing transition from one of the …

At some point very early this morning, because apparently this is what my life is now, I found myself watching a tiny dashboard called CopeLimit while GitHub Copilot’s new AI Credits billing model went live. This was not the original plan for the morning. The original plan was probably something …

A few weeks ago I wrote about what I was then calling the Agile Agentic Development Life Cycle, or AADLC …