ENGINEERING · SOFTWARE ENGINEERING
How we manage engineer performance when they work as part of your team
Who reviews the work, who raises a problem, and what replaces the reporting theatre that usually fills the gap.
5 September 2026
Read article →PERSPECTIVES · AI
Why AI pilots fail to reach production
A working pilot proves that AI can perform a task. It does not prove the system can handle real users, changing models, security controls, measurement and operating costs.
1 September 2026
Read article →Latest
ENGINEERING · AI SECURITY
Testing AI agents for prompt injection
How to test whether untrusted instructions can change an agent’s behaviour, expose information or misuse the tools it can access.
4 September 2026
Read article →
ENGINEERING · OPERATIONS
Who gets paged when the AI misbehaves
An alert nobody acts on trains everyone to ignore the next one. What an AI alert has to name before it is switched on.
2 September 2026
Read article →
ENGINEERING · AI
Evaluation and error rates
How to define correct, measure performance on real cases and understand the different ways an AI system can be wrong.
1 September 2026
Read article →
ENGINEERING · OPERATIONS
Building an AI gateway
How one controlled route for model calls carries identity, budgets, logging and the switch that turns a model off.
31 August 2026
Read article →
ENGINEERING · OPERATIONS
Model choice and switching cost
How the model behind a system is chosen, and how the cost of changing it is measured instead of guessed.
29 August 2026
Read article →
ENGINEERING · AI SECURITY
Reversibility decides what an agent does alone
Which actions an agent may take alone, which stop for approval, and how the review work is kept manageable.
26 August 2026
Read article →
PERSPECTIVES · AI SECURITY
Why a system prompt is not a defence
Instructions and data arrive through the same channel. What a system prompt can do, and what it is being asked to do instead.
22 August 2026
Read article →
ENGINEERING · OPERATIONS
Running costs at scale
What a working system costs per month at real volume, measured per team, with limits that hold.
22 August 2026
Read article →
ENGINEERING · SOFTWARE ENGINEERING
Working inside another engineering team
An embedded engineer adopts the client’s process. What should travel with them anyway, and what should not.
20 August 2026
Read article →
ENGINEERING · OPERATIONS
How to tell a provider changed the model
The version string stayed the same and the answers moved. What actually detects that, and what only appears to.
17 August 2026
Read article →
PERSPECTIVES · SECURITY
Why scanners miss access control
Broken object level authorisation is the most common serious flaw in software built quickly, and no scanner finds it. The reason is worth understanding.
16 August 2026
Read article →
ENGINEERING · AI SECURITY
Where shadow AI actually hides
Four discovery sources disagree with each other, and the disagreement is the finding. Why the finance ledger stopped being the early warning.
15 August 2026
Read article →
ENGINEERING · AI
Retrieval over company data
How an assistant finds the right passage in a large body of documents, and why the index inherits every old permission mistake.
12 August 2026
Read article →
ENGINEERING · AI SECURITY
What an approved assistant can see
An assistant inherits the permissions of the person using it. It returns what the asking person is already entitled to open, which makes a decade of permission decisions searchable overnight.
9 August 2026
Read article →
ENGINEERING · AI SECURITY
What a guardrail actually catches
A detector is a control with a false-negative rate and a false-positive cost. Both are measurable, and both belong in the report.
7 August 2026
Read article →
ENGINEERING · AI
Measuring answer quality in production
How to use graded test cases to detect when an AI system starts producing different or worse answers after launch.
6 August 2026
Read article →
ENGINEERING · AI SECURITY
When AI exposure becomes notifiable
Singapore’s PDPA sets two thresholds and a three-day clock. What that means when the data left through an assistant nobody approved.
4 August 2026
Read article →
PERSPECTIVES · SOFTWARE ENGINEERING
What senior engineering requires
How we assess an engineer’s ability, responsibility and judgement beyond the number of years on their CV.
3 August 2026
Read article →
PERSPECTIVES · SOFTWARE ENGINEERING
Why engineering continuity matters
Changing engineers means losing context. Why continuity affects delivery, code quality and the ability to make changes safely.
2 August 2026
Read article →
PERSPECTIVES · SECURITY
Where your data goes
Which provider, under which agreement, in which region, fixed in writing before the first call is made.
1 August 2026
Read article →
ENGINEERING · SOFTWARE ENGINEERING
Engineering continuity, and what it costs to lose it
What leaves when an engineer leaves, why documentation recovers only part of it, and how continuity can be specified in a contract.
30 July 2026
Read article →
PERSPECTIVES · SECURITY
Why Copilot does not leak, and what it does instead
A decade of permission decisions became visible the moment the search interface arrived. It is the search interface that made a decade of permission decisions visible at once.
25 July 2026
Read article →
ENGINEERING · AI SECURITY
The attack that never touches the chat box
Indirect prompt injection arrives inside a document, a ticket or a calendar invitation. The user asks an ordinary question and the planted instruction runs.
24 July 2026
Read article →
ENGINEERING · OPERATIONS
Application recovery and deployment
How releases go out, how a bad one comes back, and what has to be true before either is routine.
23 July 2026
Read article →
PERSPECTIVES · OPERATIONS
Why a spend cap misses a runaway agent
A monthly ceiling notices after the money is gone. What catches a loop while it is still running.
22 July 2026
Read article →
PERSPECTIVES · SECURITY
What an assessment letter promises
A letter that says a system passed is worth less than one that says what was examined, on what date, and what was excluded.
21 July 2026
Read article →
ENGINEERING · SECURITY
Designing permissions for AI agents
How to limit the systems, information and actions available to an agent without preventing it from doing its job.
20 July 2026
Read article →
PERSPECTIVES · OPERATIONS
What a gateway actually buys
One place to control who can use AI, which models they can access, what they can spend and what activity is recorded.
19 July 2026
Read article →
ENGINEERING · SOFTWARE ENGINEERING
The first 90 days in a new codebase
What a senior engineer can honestly deliver in week one, month one and month three, and why the curve is not a straight line.
16 July 2026
Read article →
PERSPECTIVES · SOFTWARE ENGINEERING
What AI changes about software development
AI has made code faster to produce. The engineering around that code now decides whether it reaches production.
15 July 2026
Read article →
PERSPECTIVES · OPERATIONS
Why maintenance should improve software
Support that only keeps a system alive leaves it worse every year. What maintenance is for when it is done properly.
13 July 2026
Read article →
PERSPECTIVES · SOFTWARE ENGINEERING
Why the employment relationship matters
An engineer on a payroll and an engineer on a bench behave differently in month four. What the contract actually determines.
12 July 2026
Read article →
ENGINEERING · SECURITY
Why permission cleanups regress
Sprawl regrows within months because the behaviour that created it is still there. What makes a clean-up hold.
10 July 2026
Read article →
PERSPECTIVES · SECURITY
The licence problem in procurement
Copyleft in a proprietary codebase is a commercial problem before it is a legal one. The bill of materials already has the answer.
8 July 2026
Read article →Nothing filed under that pair yet.