Writing
Projects, tests,
and turns.
The pieces here start with something I built, tested, led, or had to rethink. Declared, Not Wired and the VulnHunter field study are available to read; the other stories below are in development, not published findings.
Declared, Not Wired
An agent-built safeguard existed in the design, but not on the route that could act. The useful part is the test that made the gap visible.
What did Capital One's VulnHunter actually do against crAPI?
One controlled evaluation of Capital One's AI security tool, including the run materials, candidate output, human review, and enterprise integration questions.
Stop before build
A first system design bundled too many jobs into one resolver. Two failed independent checks changed the implementation approach.
A correction needs something stable to push against
What gets lost when a polished current summary replaces the trail of events, objections, and corrections that produced it?