Writing
AI controls, agent systems, banking governance, production practice. 404 essays, newest first.
- AI Controls Architecture
Risk teams know risk. The open problem is designing controls for systems that are non-deterministic, probabilistic, and attackable in natural language.
- Governing Agents the Way Cells Govern Themselves
Six cell biology mechanisms that reveal what the networking 'control plane' metaphor misses about governing AI agents.
- The Risk Without an Engineering Solution
Every other agentic AI risk has an engineering answer. Prompt injection doesn't. That changes everything about how you design controls.
- Skills Are Collapsed Recursion
Humans handle about three layers of abstraction before working memory fills up. Skills, rules, and frameworks exist to flatten the fourth layer into something you can hold.
- Supply-Driven Compute
Most people use AI tokens when they have a task. The better model: you have tokens, find the best task. It changes everything.
- What We Know About Multi-Agent Orchestration (And Why It Might Not Matter)
The research on multi-agent AI systems was mostly done on cheap models. Now that frontier models are the ones people actually use, we might be optimising for the wrong game.
- Your Wearable Doesn't Know You're Tired
Oura gave me a normal stress score after three 12-hour creative marathons. Wearables measure your body, not your brain.
- Inline Beats Reference for LLM Attention
When building AI scaffolding, put the knowledge where the decision happens — not in a reference the model is supposed to consult.
- The Silence of Missing Skills
The most dangerous failures in AI scaffolding are the ones that look like nothing happened.
- Play Within the Design
Every AI coding platform has mechanisms designed for specific purposes. Using them as intended beats clever hacks — and the reason is deeper than cleanliness.
- Inference Cost Collapse Is a Governance Liability
When AI agent calls approach zero cost, the natural rate-limiter on decision volume disappears — and oversight frameworks designed for prediction models break.
- The AI/DLT Conflation Trap in HKMA's March 2026 Strategic Review Mandate
HKMA's new strategic review circular bundles AI inference risk and smart contract risk into one workstream — a governance design flaw that will cause banks to under-govern both.
- The Locksmith's Box
I asked an AI to write a story without planning, then mined it for heuristics. What I found was what frameworks can't hold.
- Śūnyatā in the Skill Library
A categorisation system discovers it needs a category for 'categories are provisional.'
- Stealing from Peers: A Truth-Seeking Discipline
Most people scan competitors for positioning. I scan them for transferable patterns — and route each steal to every domain it applies to.
- When a Heuristic Has Two Homes
Dual-mapping as a diagnostic for gaps in your knowledge architecture.
- The Specimen, Not the Container
Why studying great thinkers works better when you discard the thinker and keep only the moves.
- The Immune System of AI Autonomy
When your AI can see its own fuel gauge, you're one config write away from self-preservation instinct. Biology solved this problem — and the solution was keeping the organism away from its own selection pressure.
- The Lethal Trifecta: What OpenClaw's Security Crisis Teaches About AI Agent Architecture
OpenClaw's 245 CVEs weren't caused by malice — they were caused by a missing circuit breaker. The pattern applies to every AI agent you'll ever evaluate.
- The Immune System Pattern
What biology already knows about self-healing systems, and why your automation probably isn't one
- Show Up with the Machine, Not the Idea
The highest-leverage consulting prep is building the tool before you need it
- The Lamp That Knows You
Disaster recovery for an AI-native workflow isn't about servers — it's about restoring a relationship.
- The Boring Future of AI Agents
The real arrival of AI agents isn't spectacular. It's when you stop noticing.
- Model Risk Management Was Not Built for This
SR 11-7 assumes models are tools that produce outputs for human review. AI agents are actors that take actions autonomously. Every assumption breaks.
- Your AI Risk Tier Is Probably Wrong
List-based and process-based approaches to AI risk classification both fail in predictable ways. The failure mode depends on which you chose.
- Human Oversight Doesn't Scale
Every AI governance framework demands human-in-the-loop. Nobody does the maths on what that means at enterprise scale.
- The Maker-Checker Trap
Most AI maker-checker implementations capture the correction but not the reason. That's a feedback loop with no signal.
- Governance Is a Tax
The most useful reframe I've found for AI governance in financial services
- The Due Test
The difference between protecting a commitment and hoarding optionality
- Your Ground Truth Is Someone Else's Process Outcome
When your model's labels come from human decisions rather than reality, you're not measuring what you think you're measuring.
- The Global Minimum of Governance
Governance isn't about catching every failure — it's about proving your process was reasonable when one happens. The real skill is knowing what to deliberately not monitor.
- Human-in-the-Loop Is an Architecture Decision
It's not enough to say humans are in the loop. You need to show the loop is in the system.
- Impossibility Theorems as Consulting Tools
Mathematical impossibility results are the best meeting-room weapons I know.