Security

Git metadata now crosses execution boundaries in CI and agentic systems, which turns familiar repository fields into potential code execution inputs.

Two beerware-minded tools for reducing mobile configuration risk: one by hardening what ships in the client, the other by hardening what the backend is willing to deliver.

Anthesis has shifted from one-shot agent ambitions toward governed memory, adapter abstractions, loop orchestration, SSDF enforcement, and Git-native policy verification.

A practical reference for designing authentication systems that can withstand compromise, replay, abuse, and operational failure.

Securing untrusted clients across the lifecycle

A practical threat model for AI-assisted and agentic software development across requirements, architecture, implementation, testing, and operations.