Skip to content

Engineering notes

The parts that don’t fit in a launch post.

Writing on RAG, MCP server design, prompt injection, permission-aware retrieval and the DevOps underneath AI systems.

We’d rather show the working than assert competence, so these include the turns that were wrong and the reason we took them.