FunnyEnough — engineering notes
Notes on building with AI — the patterns that held up, and the ones that bit me.
-
Receipts for Prompts: Hashing the Bytes an Agent Reads
A hash-verified copy box still handed back a curly quote where a code fence should be. The wptexturize bug behind it, and the byte-receipt system that stops it.
-
AI Agent Security Starts at the Context Boundary
Stop treating tool output as plain text. A practical boundary review for MCP servers, traces, red-team tests, and runtime AI-agent supply-chain risk.