Posted inAI AWS Day 27: RAG Freshness: Git Webhooks vs Nightly Jobs Stop serving yesterday’s main: design webhook-driven and nightly RAG reindex paths so hourly merges do not create silent index drift.
Posted inAI Machine Learning Day 26: Citations or It Didn’t Happen Force file:line citations in code RAG and fail closed when the quoted span was never retrieved — stop shipping eloquent guesses.
Posted inAI Machine Learning Day 73: Draft-Then-Verify Routing Draft-then-verify routing: cheap model drafts, expensive model gates on risky paths — tests remain ground truth.
Posted inAI AWS Day 72: Prompt Caching Pitfalls Prompt cache keys must include rules SHA, tools schema, and guardrail version or you serve stale policy after a repo move.
Posted inAI Day 71: Token Budgets per PR and per Engineer Show token budgets per PR and per engineer next to the diff — soft-warn at 80%, hard-stop at 100%.
Posted inAI AWS Day 70: Project: Secure Coding-Agent Sandbox on ECS Fargate Project: ephemeral ECS Fargate coding-agent sandbox with no prod creds, locked egress, and evidence bundle on exit.
Posted inAI System Design Day 69: Policy as Code for Shell and Apply OPA/Cedar policy-as-code in front of shell and apply tools — prompts are not controls.
Posted inAI AWS Day 68: Abuse and Cost Attacks Stop token bombs and recursive invokes with input limits, depth caps, and per-tenant daily budgets.
Posted inAI AWS Day 67: Supply Chain: Model and Image Provenance Pin and verify agent image digests and allowlist model IDs — SLSA-ish provenance before Fargate/Lambda pulls.
Posted inAI System Design Day 66: Audit Trails Humans Can Replay Append-only session event logs with artifact hashes so humans can replay agent runs without guessing.