Security·7 min read·
A Correct Answer Doesn't Mean the Agent's Memory Is Clean
A synthetic memory-recovery drill shows why a correct task result and a clean derived state are separate checks.
Vol. MMXXVINo. 95
Field reports from cloud-security engineering, AI experiments, and a homelab that keeps getting bigger.
Latest writing from William Zujkowski
Start here: agentic security, tools, and homelab reading paths
Security·5 min read·
Your Backup Administrator Should Not Be Able to Delete Yesterday
Timelock Drive puts retention below a compromised host. An offline model shows why unfreezing a backup must start a countdown, not erase its protection.
Security·6 min read·
The Database Gets a Vote on Your Read-Only Agent
A disposable PostgreSQL lab tests what an agent-facing database role can actually do, including the SELECT that writes through a privileged function.
Systems·3 min read·
The Recovery Button Deserves a Dry Run
Pilot Execution treats recovery as a state-changing program and previews its cross-component effects before committing the action.
Security·8 min read·
The Policy Is the Part That Moves
A proved gate is only as good as the policy it enforces, and the policy is the part that changes while the agent is running. What OSCAL and the agent-authorization drafts both assume, and what breaks.
Systems·4 min read·
The Filesystem Should Start as a Specification
SYSSPEC treats a filesystem specification as the thing an agent edits, then asks generated code to live up to the contract.