Posted inAI Machine Learning
Day 65: PII Redaction Before Embeddings
PII redaction belongs before chunking and embeddings — do not index people into the vector DB.
Day 64: Secret-Aware Context Filters
Redact secrets on the way into model context and block secret egress on the way out — prefer Secrets Manager handles.
Day 63: IAM for Agents: Roles, Not God Keys
Per-tool IAM roles and short-lived STS sessions — never god keys; validate agent-proposed policies with Access Analyzer.
Day 62: SSRF and Tool Allowlists
URL tools need HTTPS allowlists, DNS private-IP blocks, and egress proxies that deny cloud metadata SSRF.
Day 61: Prompt Injection in Jira, Email, and RAG
Sanitize Jira, email, and RAG as untrusted data before any tool is allowed — developer intent alone authorizes tools.
Posted inAI System Design
Day 60: Project: Migration Strangler Assistant
Project: two agents plus contract tests cut a monolith service behind a façade with a human merge gate and evidence bundle.
Posted inAI Machine Learning
Day 59: Multi-Agent Eval: Task Suites, Not Vibes
Multi-agent eval means versioned task suites in CI, not vibe checks — score tests, structure, and critic calibration.
Posted inAI System Design
Day 100: Capstone Ship: Demo, Postmortem, Next 90 Days
Capstone ship: demo, postmortem, freeze v1, and schedule the boring next-90-days work.
Posted inAI System Design
Day 58: Spec-First: OpenAPI Remains Source of Truth
OpenAPI remains source of truth — agents patch the spec first; contract tests own the API surface.
Posted inAI System Design
Day 99: Capstone Build Week Checklist
Capstone build-week checklist: security, traces, budgets, dual control, and docs before demo day.