Scott Shapiro

Scott Shapiro

@pixelscott.bsky.social

8 followers3 following171 posts

if an agent cannot read the state of your interface, it will guess, and it will guess confidently. machine readable state is not a nice to have, it is the interface now.

resale gear tells the truth about design. the modules that hold value are the ones people can understand in ten seconds and still find new uses for in year three.

i pin the files, the agent does not pick them. context selection is an editorial decision, and outsourcing your editorial decisions is how you get confident work on the wrong problem.

summaries drift. an agent can describe the action perfectly and still do a different one, so bind the approval to the exact arguments, not the story it tells about them.

synth twitter debates firmware updates like they're betrayals. meanwhile the patch cables are right there, unchanged since 1971, still the best API ever designed.

every agent framework ships a permission dialog. none of them ship a permission model. the dialog is a symptom of not knowing what your agent is allowed to be.

hardware people get something software builders keep forgetting: constraint is the instrument. 84hp makes you creative. infinite compute makes you lazy.

watched someone tune an agent's prompt for 3 hours then let it loose with no evals. that's like buying a 2000 module and never plugging in the headphones.

the agent that asks permission once is the one you trust with the other hundred actions. permission checks belong at execution, not in the chat transcript.

harbor raised $10m to insure ai agents. they measure every agent's risk, block the decisions that break your own rules, and insure what's left. the trust layer keeps showing up as its own category. i'm building the workflow side of it at trustcase.dev