Article
Codebase graph servers: MCP for AI agents, genuine breakthrough or just middleware?
Code graph MCP servers index your codebase as a symbol graph and expose it to LLM agents. Powerful on large projects — but useful for 90% of codebases?
#Architecture
11 articles
Article
Lost in the Middle: Why Your LLM Ignores What You Give It
LLMs don't read long contexts well, not because of capacity limits, but by design. Two studies measure the gap. What it means for how you architect your systems.
Article
The Agentic AI Foundation — standardizing agentic AI without shooting yourself in the foot
The Linux Foundation launches AAIF with MCP, goose, and AGENTS.md. Open governance to prevent ecosystem fragmentation.
Brève
WebMCP — MCP in the browser, finally
A JavaScript API that turns your site into an MCP server. Agents talk to your app through structured tools instead of scraping the DOM.
Deep Dive
AI Agent Guardrails: Every Source of the Problem
AI agents have a fundamentally different attack surface than chatbots. A complete map of the threats — from indirect prompt injection to tool supply chain attacks.
Deep Dive
Building an agent-first harness with OpenCode custom tools
How to give an AI agent all the tools it needs to run, analyze, and see your application — and become truly autonomous in detecting and fixing errors.
Article
The review-manager: anatomy of a code review orchestrator
A deep dive into the review-manager powering opencode-team-lead — how it selects reviewers, isolates their contexts, arbitrates disagreements, and produces a structured verdict without reading a single line of code.
Article
opencode-team-lead: an agent that plans, delegates, and never writes code
On long tasks, an all-in-one agent loses track and reviews its own code with the same blind spots that produced it. I built opencode-team-lead to fix both problems with a strict delegation pattern.
Article
Encrypting secrets in Go: from DIY crypto to the right primitives
SHA256 as a KDF, no salt, no versioning — the classic encryption pitfalls in Go, and how cryptio fixes them with Argon2id.
Article
Your agents don't need memory
In a codebase that serves as the source of truth, everything an agent needs to 'know' should be mechanically verifiable. Giving your agents memory is patching in prose what should be encoded in the harness.
Brève
Harness engineering: what Anthropic and OpenAI are actually doing with their agents
Anthropic and OpenAI published their harness engineering post-mortems weeks apart. Different problems, same conclusions — here's what to take away.