Disclosure in Action: How AI Helped Me Keep the Disclosure Clean
How AI helped keep the disclosure clean — not by writing it, but by stress-testing the language, the timing, and the redactions before they went anywhere public.
Disclosure in Action: What I Think Builders Should Learn From This
What builders — not security teams — should take from a small AWS-credential disclosure. Three lessons that hold up after the rotation date passes.
Fourteen patterns from a small, complete Codex skill: identity locks, subagent boundaries, provenance, no-fallback gates, and deterministic packaging.
A small story about losing a /buddy slash command, finding a Hatch Pet skill in the Plugins tab, and what 22 minutes of generation taught me about agentic UX.
Disclosure in Action: I Published Without Publishing the Secret
Day of public disclosure. The document went up; the secret stayed out. How to publish a finding without publishing what an attacker would weaponize.
ClawExplorer.AI: Turning OpenClaw Community Demand Into a Directory
How ClawExplorer.AI turns scattered OpenClaw event pages into a reviewed, searchable public directory with collection, normalization, dedupe, community submissions, and GitHub Actions deployment.
Fixing Gemma 4 Thinking Prompts in llama.cpp, Locally First
A public note on a completed fork-local llama.cpp fix for Gemma 4 thinking prompts: an inverted template guard, two Jinja changes, and test coverage for both thinking and non-thinking generation.
The 14-Cent Workflow — Designing AI to Replace Future AI Calls
Spent 14 cents teaching an AI to design its own workflow — and emit the Python code that replaces future AI calls entirely. A field note on the 5-step notebook (Claude / GPT / Gemini, MIT licensed, 29 cells) and why workflow crystallization is the cost-shape inversion most AI-glue stacks are missing.
When Buddy Vanished — Issue #45596 and the Community’s Plea
A field note on issue #45596 — one day after my own narrower parity ask, /buddy was removed from Claude Code v2.1.97 and the community filed a consolidating plea. This post anchors the buddy thread that runs from the parity ask through Fathom Lives and Reading Hatch Pet.
Disclosure in Action: The Finding Raised Bigger Trust Questions
A static-credential leak surfaced bigger questions than a key rotation can answer. Notes on what the finding said about trust, vendors, and downstream visibility.