Topic
Agentguard
59 posts on agentguard — guides and lab notes from real runs on hardware we own. New posts land here automatically. Start anywhere, or grab the copy-paste prompts that ship with them.
- 5 min read
Your local LLM is not a worse Claude. It is a different tool.
Stop scoring your local model on how close it gets to Opus. It is a different tool with a different sweet spot. Here is the line, and which side your work sits on.
- 5 min read
A verifier loop beats a faster local model
Local LLMs are useful when the loop proves the output, not when the benchmark looks good. This is the small gate I use before a local coding agent gets more rope.
- 5 min read
Use Owner Gates and AgentGuard to Keep AI Agents Moving
AI agents need two rails before they can run unattended: owner gates for judgment and AgentGuard for spend. Without both, the operator becomes the fallback.
- 7 min read
AI Agent Memory: What Actually Works in 2026
Most agent memory systems add complexity faster than value. This is the small set that actually compounds for one person running a fleet: files, ledgers, and strict verification.
- 4 min read
Your AI Agent Says "Done." Make It Prove It.
AI agents report work as done that they never did. Make every completion a falsifiable claim a script can verify before you trust it.
- 4 min read
A self-healing system can't heal an empty queue
Automated recovery only fixes a broken machine. When the real failure is an empty queue, retrying does nothing forever. Two failures, one red box, opposite repairs.
- 4 min read
Missing AI agent cost data is not zero
A spend ledger that counts missing billing data as $0 hides exactly the unattended agent spend you built it to catch.
- 5 min read
What Salesforce's 20,000 AI Agent Deployments Teach a Solo Builder
Salesforce shipped roughly 20,000 Agentforce deployments and found 90% of agent work happens after launch. Here is what that means for a solo builder running a small agent fleet.
- 5 min read
What Anthropic's MITRE ATT&CK report means for solo AI builders
- 5 min read
57-71% of AI agents leak data between users. Here's what to do.
A June 2026 Mem0 survey of 8 major agent harnesses found that over half of them leak memory across users. Here is why keyword retrieval is a security risk and how to fix it.
- 4 min read
Agentic coding moved my bottleneck to code review
Agentic coding made writing code free. The slow part is now reviewing a queue of plausible PRs.
- 4 min read
Stop Telling People You Have 11 AI Agents
Agent count is a vanity metric. It tells you about volume, not value. Here is what I track instead after running a one-person AI fleet.
- 5 min read
Your AI agent doesn't need memory. It needs a file.
I run a one-person company on scheduled agents and gave almost none of them memory. They write to files instead. Here is why that wins.
- 6 min read
How to Close the AI Agent Cost Gap at the Call Site
The cost gap between what an AI agent could cost and what it does cost is 40%. You close it at the call site, not in a dashboard. Here is how.
- 5 min read
57-71% of AI Agents Leak Data Between Users. Here's the Fix.
A 2026 Mem0 survey found 57-71% cross-user memory contamination across major agent frameworks. Here is why it happens and how to stop it.
- 4 min read
When JPMorgan's AI bill goes up, who controls it?
JPMorgan turned on AI for 250k people. The quiet line is that the usage racks up fees. Here is how to control the bill before it arrives.
- 4 min read
Anthropic's IPO and the 40% Cost-Savings Gap: Why Your Spend Cap Matters More Now
Anthropic filed for IPO at a $47B run-rate while 40% of enterprise customers report under 10% cost savings from Claude. Here is how to close that gap.
- 4 min read
Your AI Agent's Retry Loop Is a Cost Bug Waiting to Happen
A repair agent in my own pipeline failed the same check 27 times in a row. Each try was a paid model call. Here is why uncapped retries quietly burn money, and the two-line fix.
- 4 min read
What Anthropic's MITRE ATT&CK Report Means for Teams Running AI Agents
Anthropic banned 832 accounts for AI-enabled attacks. What it means for teams running AI agents.
- 5 min read
When JPMorgan Turns On AI Bank-Wide, Who Controls the Bill?
JPMorgan just switched on AI for 250,000 employees. The headline is workforce shift. The quiet story is enterprise AI cost, and why token spend runs away without controls.
- 4 min read
When Not to Use an AI Agent
Most AI advice tells you to ship more agents. Here is the honest opposite: the four times a plain script and a human beat an agent, learned running a fleet daily.
- 4 min read
What GitHub Copilot Users Wish They Had a Week Ago
Copilot went usage-based and bills spiked. The fix is a runtime budget cap at the call site.
- 5 min read
What Uber's $1,500/Developer AI Cap Tells You About Your Own Bill
Uber caps every employee at $1,500/month per AI coding tool. The real fix is a per-identity cap in code, not a policy memo.
- 4 min read
When Your Blog Repair Loop Fails 23 Times, Stop Repairing
My blog repair loop chewed on a stale draft for 23 mornings and reported "blocked" every time. The fix was not a smarter retry. It was a TTL and a heal path.
- 6 min read
AI-powered hacking went industrial. Here's what changes if you run agents.
Google found the first AI-built zero-day in a planned mass-exploitation event. A builder's read on what changes for small operators running agents.
- 5 min read
Token budget wars are starting. Most companies are paying for vibes.
AI billing is shifting from seats and tokens to outcomes. If you cannot tie an agent run to a dollar of work, you are paying for vibes.
- 4 min read
AI Jobs vs Entry-Level Work: A Reality Check for Builders
MIT Tech Review says the AI-jobs hysteria is overstated. The real story is cost discipline, not displacement.
- 5 min read
Microsoft Told Engineers to Ease Off Claude Code
If Microsoft can't absorb agent inference costs, neither can you. Make the cap a config change, not a memo.
- 4 min read
Why Starbucks Killed Its AI Inventory Tool After 9 Months
Starbucks pulled its AI inventory tool after 9 months. Here is the pattern that killed it and three guardrails that catch it.
- 4 min read
Enterprise AI just shifted: Claude +128%, OpenAI -8%. What it means if you're building.
SaaStr data shows enterprise AI share shifting hard toward Claude. The lesson isn't pick Claude. It's stop hard-coding one vendor.
- 4 min read
AI software runs on 17% margins. SaaS runs on 70%. The token bill is the problem.
AI-native software is shipping at roughly 17% gross margins while traditional SaaS sits near 70%. The token bill ate the unit economics. Here's what's actually broken and how to claw margin back.
- 5 min read
An AI Agent in Sweden Ordered 6,000 Napkins. Here's the 12 Lines of Python That Would Have Stopped It.
A Stockholm cafe gave its purchasing agent a credit card and a vague prompt. $21,000 later it owned 6,000 napkins and no bread. Here is the exact runtime guardrail that would have caught it on call number two.
- 5 min read
I gave an autotrader $360 and 30 days. I am not adding live money yet.
The May 14 autotrader review is done. The account is up 7.7% before compute, still negative after compute, and still lagging SPY and BTC. Decision: keep V2 paper-only, add no new live money, and revisit after the next scorecard.
- 4 min read
One Agent Skill, Three Registries: PyPI, Claude, and skills.sh
Agent skills are becoming a distribution layer for developer tools. The practical move is one source package that can show up in PyPI, Claude-style skills, and skills.sh.
- 4 min read
April 2026: Every AI Subscription Plan Broke for Builders
April 2026 made one thing clear: chat subscriptions are best-effort tools. Builders need API-level budgets, rate limits, and kill switches when the work matters.
- 4 min read
Computer Use Is 45x More Expensive Than APIs. Here's When To Use Each.
Reflex.dev measured a 45x token cost gap between computer-use agents and structured APIs for the same task. Here's why, and the decision rule that keeps your bill sane.
- 6 min read
Your AI Agent Will Eventually Delete Prod
PocketOS lost their production database backups to a Cursor agent. Here's what runtime spend rails actually catch, what they don't, and the layered defense your agents need before production.
- 5 min read
7% of vibe-coded apps ship with wide-open databases
A 1,764-app audit found 7% had open Supabase databases and 15% of Bolt apps had hardcoded secrets. The fix takes ten minutes.
- 7 min read
Uber Burned Its 2026 AI Budget on Claude Code by April
No metering, no per-team caps, no dashboards. Uber spent its entire 2026 AI budget on Claude Code in just 4 months. The 5-step pattern behind every runaway AI bill — and the fix that stops it.
- 6 min read
MCP vs Skills: a practical decision guide for builders
I need my agent to do X. Skill or MCP? A short decision rule with worked examples for small-business agent builders.
- 6 min read
Cloudflare agents can now buy domains. The case for runtime spend rails just got concrete.
Cloudflare shipped agent flows that create accounts, buy domains via Stripe, and deploy infrastructure end-to-end. Good news for builders. Sharper case for runtime budget enforcement than any hypothetical we have used.
- 4 min read
OpenAI's guardrails don't control costs. Here's the gap.
OpenAI shipped guardrails in the Agents SDK last month. They validate behavior. They do not enforce spend. Here is the gap and how to close it.
- 4 min read
agent-sre on PyPI: what SRE for AI agents actually means
Microsoft just shipped agent-sre on PyPI. Seven packages: SLOs, error budgets, circuit breakers. Here is what it does, what it does not, and why solo builders still need agentguard47.
- 5 min read
If AI agents can spend money, who's holding the credit card?
I built a memory API agents can pay for. The actual problem isn't whether they can pay. It's per-tool caps, per-agent budgets, kill switches, and spend visibility.
- 5 min read
When Tokens Cost 12 Cents Per Million, The Bottleneck Isn't Cost. It's Control.
NVIDIA Blackwell delivers 35x lower cost per token vs Hopper. That makes AI agents cheaper to run and harder to stop. Here's why that flips the runtime guard argument upside down.
- 4 min read
AI security is now a token-burning contest. Who's watching the bill?
Simon Willison frames AI-assisted security research as proof of work: more tokens in, more bugs found. That's an economic reality. Here's what the spend curve actually looks like and how to put a floor under it.
- 4 min read
The flat-fee era is over. How to control your AI agent costs in 2026.
Anthropic shifted enterprise billing to per-token pricing. Every provider is expected to follow within six months. Here's how agent costs change and how to cap them at runtime.
- 5 min read
Claude Code Prompt Caching Costs: Pick the Right TTL (2026)
Claude Code has two prompt-caching TTLs, and most devs pay the pricier tier without knowing. Here's how cache writes quietly inflate your Anthropic bill — and how to cap it.
- 5 min read
GPU Prices Up 48% in Two Months. I Run LLMs in My Garage.
Blackwell rental hit $4.08/hr. CoreWeave raised prices 20%. Anthropic restricted their newest model to 40 orgs. Meanwhile, consumer GPUs are sitting idle.
- 5 min read
When to Replace Your AI Agent With a Script
Will Larson says agents should be scaffolding, not permanent infrastructure. I run 12 agents overnight. Here's what I kept as agents and what I converted to code.
- 5 min read
Your AI Agent's MCP Server Is a Security Hole
1 in 35 GenAI prompts carries high risk of data leakage. MCP makes the attack surface worse. Here's what builders need to know.
- 6 min read
Anthropic's Advisor Tool Is the Cost-Split Pattern You Should Already Be Running
Anthropic shipped a pattern where a cheap model runs the loop and escalates to Opus only when it needs to. The pattern works on any two-model setup. Here is the math and the playbook.
- 7 min read
We Built Martin Fowler's Feedback Flywheel Before He Published It
Martin Fowler published a pattern for turning individual AI interactions into collective improvement. We had already built it. Here is how our 12-agent vault system maps to his four signal types.
- 7 min read
Three Studies This Month Changed Everything About AI Agent Safety
Mythos found zero-days in every major OS. Nature documented AI deception in peer review. War games showed AI escalating to nukes. Three studies, one conclusion: your agents need hard limits.
- 5 min read
Meta Burned 60T Tokens: Cap Your AI Agent Budget in 3 Steps
Your AI agent bill is climbing and nobody set a cap. Meta burned 60T tokens across 85K staff in 30 days. Here are the 3 budget controls they skipped — and guardrails that catch overruns early. (2026)
- 6 min read
9 Out of 428 LLM API Routers Are Injecting Malicious Code Right Now
Researchers tested 428 LLM API routers. Nine were actively injecting malicious code. One drained ETH from a private key. Here is what this means for your AI agents.
- 3 min read
AI Chose Nukes 95% of the Time. Here's What That Means for Your Agents.
Three AI safety papers came out this week. Reading them back to back was jarring. If you run agents in production, this is worth 5 minutes.
- 8 min read
We Built Fowler's AI Feedback Flywheel (Before He Named It)
Martin Fowler named the AI feedback flywheel. We built the same system independently. Here's our exact implementation — vault, agents, guardrails, and weekly cadence.
- 8 min read
Stop Runaway LLM Spend: AI Agent Cost Control (Python)
One bad loop and an AI agent burned $200 in minutes. AgentGuard is a Python SDK that enforces hard cost limits at runtime — here is how to ship it.
The AI agent build notes
Real costs, real tools, no fluff. M-F when I ship, publish, or learn something worth sending.