The security questionnaire, answered in public
We publish our security questionnaire answers so clients see the real controls, gaps and limits before procurement asks.
ReadInsights
Notes from the work itself.
Practical notes on AI-first engineering, software architecture, security and delivery, written for the people who have to decide what gets built and who pays for it when it goes wrong.
Your RAG pipeline is a search problem in an AI costume
Retrieval quality sets the ceiling on every answer. Most teams tune the model while the index keeps returning the wrong material.
ReadYour AI vendor is now part of your supply chain
You spent a decade learning to manage software supply chain risk. Then a model provider arrived with none of the properties that made those…
ReadEscrow is a state machine with money in it
Escrow fails when money can sit in two states at once. Model every state, transition, retry and ledger entry clearly.
ReadPrompt injection is not a prompt problem
Prompt injection is a privilege problem, so defenses must limit what AI systems can do rather than rely on better prompts.
ReadWhat AI does to freelance work, and what it does not
AI has cut some freelance categories, grown others, and changed many more. The split depends on whether buyers can judge the work.
ReadChoosing technology you can still hire for in 2046
Utilities need software choices that can be maintained, audited, rebuilt and handed over across twenty year horizons.
ReadReputation you can take with you
Marketplace reviews keep workers tied to a platform. Portable records need verified facts, signatures, attribution and revocation.
ReadRights expire, and your CMS should know before your lawyer does
The real asset is permission to show content. Your CMS needs rights, expiry, takedown and reporting built into its model.
ReadDisputes, the feature no marketplace wants to design
Disputes need structured agreements, timers, defaults, partial outcomes and human accountability when money is on the line.
ReadNext step
Reading because you have a project in mind?
A senior engineer reads every enquiry and replies within one business day with an honest assessment, including when we think you shouldn’t build it. No sales call, no deck.
