Posts

Everyone is an agent now April 11, 2026

Is your production ready for it?

OpenClaw is a thing. Everyone is an agent now. That means you can’t assume that clients of your APIs are human. Even if you provision separate accounts for agents in your org, set up all the right permissions, and “do everything right,” the phenomenon of Shadow IT means there will be agents acting as humans on the inside of your company.

Earlier this week, Anthropic announced Mythos, a model so capable at developing security exploits that they are not releasing it publicly. Combine increasingly powerful models, which remain vulnerable to prompt injection, with OpenClaw installations and the common lethal trifecta, and you have a whooooole lotta endpoints that will become capable, prompt-injected attackers on the inside of your org in the near future.

Context March 22, 2026
More than just prompts.
System, Metasystem, Taxonomy March 1, 2026
Machines all the way down.
Message February 24, 2026
The purpose of a message.
Security: Contexts and Shared Resources August 4, 2024
A simple mental model for thinking about security.
Go Pattern Matching May 15, 2022
Simulating match expressions in Go.
Making Progress February 5, 2022
Three elements to making progress.