A published testimonial is worth exactly what its verification is worth, and most
sites verify nothing. The interesting problem was not the sign-in flow, it was deciding
where verification stops.
Trust and identity · Production
Most websites expect an agent to scrape them. This one registers tools a capable
browser can invoke directly, and the build fails if the published list and the
registered tools disagree.
Agents and machine access · Production, on a time-limited origin trial
Two walk-throughs of this site's own machinery: what happens when you press send on
the contact form, and what an AI agent sees when it arrives. The failure paths are
shown rather than implied.
Reliability and cost · Production
Adding a second sign-in provider is where verification systems usually go wrong. The
fix was structural rather than careful.
Trust and identity · Production for two providers, implemented for a third
Bursty work on a host that stayed awake regardless. The obvious move was also the
last step rather than the first.
Reliability and cost · Production
A scheduled registry purge deleted the image production was running on. The obvious fix had a hole in it, and the hole is the interesting part.
Reliability and cost · Production
Mail providers send daily reports on who is sending email as your domain, and almost nobody reads them. The ingestion was the easy half; knowing what your DNS actually publishes was the half that mattered.
Security and secrets · Production
Every sending platform keeps its own list, and the obligation does not migrate when you change vendor. Most of the work was database permissions, not cryptography.
Trust and identity · Production
Eight of twenty-six jobs failed and the VM was deleted after 32 hours. What the failures actually said, and what changed when it came back four months later.
Reliability and cost · Production
A proxy with 170 routes, fifteen pointing at endpoints that were never there. Nothing caught them, because a compiled integration is not a verified one.
Integrating other people's systems · Production
There is no undo on a shared mailbox. Preview before apply, a safety cap, and going live only on an explicit go-ahead.
Integrating other people's systems · Production
A dynamic IP against a locked-down key vault. The real alternative was never “keep running the script”, it was “widen the rule and forget”.
Security and secrets · Production
Four services moved off long-lived keys onto managed identity. The code change is trivial; the failure mode moving from startup to first use is not.
Security and secrets · Production
Turning Complex Problems Into Confident Technology