I build agentic engineering platforms
lights out, flight deck green, agents warded for an 8h+ run
Projects
-
A role is context, never permission. The bundle is plain files you can read and diff before a run, carrying no credential, no mount, and no command.
-
An operation you did not declare has no tool and no endpoint, so the blast radius of a write-capable MCP is one small file you can read end to end.
-
Declare what a tool may run. Arguments are validated before the process starts, each verb needs its own scope token, and every call lands in an append-only audit log.
Talk