Field Notes
Notes on systems, order, and failure.
Observations from building AI systems for security and assurance — what we learn while imposing structure on environments that exceed human scale.
Latest
Exploited Before the Patch: What php2shell Says About the Patch Window
On October 21, PHP shipped fixes for two unauthenticated remote code execution flaws in the language runtime itself. Exploitation attempts had already been seen four days earlier. Here is what broke, who is exposed, and what to do this week — plus what it tells us about patching in an era of AI-accelerated vulnerability research.
Read log- Engineering Your Next Security Tester Is an AI Agent. Can You Prove It Stayed in Scope?
- Engineering What Your Engineering Team Actually Needs to Build for DPDP
- Notes Your AI Agent Is a Third Party
- Engineering LLM Readiness Score: Is Your Codebase Safe for AI Agents?
- Engineering We Published Our First Coding Agent Skill
- Notes Accepted into Anthropic's Cyber Verification Program
- Field note On Order and Systems