The security blog
Notes from the inside of a running agentic system: what we built, what it actually protects against, and the mistakes that cost us something on the way. Every post is written from source that ships — if a claim here matters to your decision, the file that implements it is in the repository and you should go and read it.
02 · cost and identity · 11 September 2026
Nineteen strains, each with its own server-enforced identity, shipping real commits into production Google Cloud — and the whole fleet running on two flat-rate subscription seats rather than per-token API billing. One screenshot at full resolution, and what is actually in it.
01 · encryption at rest · 17 August 2026
Every git object and lake file is sealed with X-Wing, the hybrid post-quantum KEM combining ML-KEM-768 with X25519. What that means, how Cloud KMS provides it, the exact envelope we wrap around it, the one byte that turned a migration into a Tuesday — and the honest admission that moving to it lowered our ML-KEM parameter set rather than raising it.
