Along the road
every post, newest first
I assumed no scanner covered my MCP server. deepsec ships three matchers for it.
A weekend reading deepsec, Strix and Anthropic's defending-code harness. The matchers for agent tool surfaces already exist, which was not what I expected. What is missing is the thing that makes a finding trustworthy, and I think I know what it has to look like.
I asked the AI pentest startup which model it runs. The answer was open weights.
Greywatch presented their offensive-security pipeline at a small Bengaluru meetup this morning. The model turned out to be the cheap part. Here is the five-stage lifecycle off their slides, transcribed, plus what I still could not find out.
Six strangers reviewed my startup. Not one said yes, and the reason I invented was wrong.
Nine founders, eight-minute rounds, and a raw feedback sheet two days later. Here are all six responses my table got, the neat theory I built out of them on the drive home, and the single row that killed it.
I asked five coworking spaces in HSR what a desk costs. None of them publish it.
A week of shopping for a coworking desk in HSR Layout. Every entry-level quote came back around ₹6,500, no operator lists that number on its own site, and the day-pass maths says a monthly seat is not really buying you desk-days at all.
The share card I never looked at
I generate an Open Graph card for every post on this site, admired it at 1200px, and shipped it. Then I resized one to 360px. Two of the three elements are unreadable, my head tags were missing two properties Meta documents, and the X spec everyone still writes guides about — I cannot find it anymore.
I built one door for my agents to act through. Then I found two ways around it.
Agent OS is 44,000 lines of TypeScript that exist to enforce a single invariant: every side effect an agent has passes through one mediated boundary. This is why I built it, and the afternoon I spent proving the boundary leaks — with the tool output.
The signup form is a skill now
Vercel's deploy skill states its own goal in plain text, and it is not deploying your app. Three ways companies are already using agent skills to sell things — the claim link, the paid dependency, and owning the registry — plus the reason nobody can prove any of it works.
I took a laptop to fifteen cafes in HSR Layout. Four of them are actually good.
A first-hand ranking of HSR Layout cafes by the only three things that matter when you bring a laptop: wifi, plug points, and whether you can still hear yourself think at 4pm.
Fifty agent startups in one building: notes from Agentic Summit BLR
I walked every booth at Magicball's Agentic Summit in Bangalore and wrote down what each company actually does. Plus the one talk that was really a recruiting pitch, and the book everyone left with.