FunnyEnough — engineering notes
Notes on building with AI — the patterns that held up, and the ones that bit me.
-
AI Agent Security Starts at the Context Boundary
Stop treating tool output as plain text. A practical boundary review for MCP servers, traces, red-team tests, and runtime AI-agent supply-chain risk.
-
Lint your agent’s handoff file before it lies
Every long agent session ends with a handoff note, written by an amnesiac for an amnesiac. Mine was wrong before I saved it. Here’s how to make it checkable.
-
Verifying AI Coding Agents: Receipts Beat Vibes
AI coding agents ship plausible work fast. Here’s how to make them prove which app, state, platform and screen they actually tested — receipts, not vibes.
-
I almost shipped a bug report I never tested
A token-saver was blamed for an agent committing a stale file. I wrote it up, then ran the test I’d skipped. The tool was innocent. The real cause was worse.
-
Guardrails over trust: shipping code from autonomous agents
In 2026 you assign a ticket and wake up to a finished pull request. Writing the code stopped being the hard part — trusting it is. How to stop trusting and start enforcing.