— Field Notes / Blog

Ideas from inside the work.

Essays on engineering, security, and the practice of building software that has to hold up under real conditions.

Artificial Intelligence19 July 20264 min read

Agentic AI Isn't Just Autocomplete Anymore. It's Changing How We Build

A year ago, "AI in software development" mostly meant autocomplete with a good memory. You typed a comment, it suggested a function, you hit tab. Useful, sure. But you were still driving every keystroke. That's not…

Security16 July 20265 min read

Compliance Is the Boring Part of Agentic Apps. Build It First Anyway

Compliance Is the Boring Part of Agentic Apps. Build It First Anyway. Every team building agentic software right now is chasing the same question: can the agent actually do the thing? Book the flight, close the ticket,…

Security9 July 20262 min read

The Attack Most Companies Don't Know Is Already Happening

The Attack Most Companies Don't Know Is Already Happening Why "just a wrong password" might be the first sign of something much bigger A customer enters the wrong password once. No big deal, it happens. But what happens…

We publish carefully — a dozen thoughtful essays a year rather than fifty hasty ones. If a topic here resonates with something you're building, we'd like to hear about it.

Start a conversation