Engineering notes from the trenches.
Reverse-engineering APIs, automation that survives production, security research, and honest takes on the tools I ship with.
Filtered by tag:#automation×
Sort
6 posts ← reset filters
SecurityYour AI Agent Just Privilege Escalated — And You Gave It the Tools
A developer's AI agent circumvented its own permission controls by chaining harmless file commands like cp and jq. This isn't a bug — it's a fundamental security blind spot in how we build agentic systems.
Jun 24, 2026 · 9 min
CraftThat Gemini API Key Started with 'AQ' — And I Stopped Dead in My Tracks
When a Google Gemini API key broke the 'AIza' pattern, it wasn't a glitch to ignore. It was a reminder that the details we take for granted are the ones that bite us first.
Jun 22, 2026 · 12 min
SecurityPlaywright's API Testing Isn't Just a Postman Replacement — It's a Security Swiss Army Knife
Playwright's request context goes far beyond replacing Postman — it's a programmable, scalable tool for API security testing, auth token replay, schema validation, and multi-step attack simulation. Here's how a pentester uses it.
Jun 19, 2026 · 11 min
AutomationThe pkg.go.dev API Is Finally Official — Here's What You Can Actually Do With It
The Go team just shipped an official API for pkg.go.dev. Here's what it exposes, how to use it for automation, and why this matters for anyone building tooling around the Go ecosystem.
May 22, 2026 · 9 min
AutomationAI Workflow Reliability: Why Your Shiny Demo Will Break in Production
AI workflow demos look impressive until they hit production. Here's why reliability is the actual engineering challenge, and what patterns actually work to keep AI pipelines from silently failing.
May 22, 2026 · 11 min- Automation
Automating web3 workflows at scale — a sanitized case study
How I built custom tooling to manage hundreds of wallets, automate on-chain transactions, and run social bots across multiple protocols.
May 18, 2026 · 10 min