+ The Blog

Notes from production AI.

Field reports from building agentic workflows, permission-aware RAG, and the LLMOps to run them. What breaks in production. What we ship anyway. What we learned.

All Engineering Operations Opinions Product

+Engineering

Why were eMudhra's CA keys easy to guess?

Eight eMudhra intermediate CAs signed with P-384 private keys below 256. One key was the number 4. This post shows why a small key falls in milliseconds, how a key ceremony on certified HSMs made it, and the Go checks that stop it.

by Alexander Myasoedov · Oct 21, 2026 · 12 min read

How to check a Claude Code skill for malware

You find a useful skill on GitHub. It has megabytes of text and scripts in Python, Bash and JavaScript. You do not know what this code does. Skillisus …

by Alexander Myasoedov · Oct 19, 2026

+Engineering

How to build AI LLM guardrails with classifiers

Say you're building an AI gateway with a chat interface, something like OpenRouter, and regex-based guardrails aren't enough. Here is the full design: …

by Alexander Myasoedov · Oct 15, 2026

+Opinions and Expertise

Should you ban AI-generated code?

Researchers read 281 AI policies from the most popular open source projects. 83% allow AI in code, and 188 anti-slop measures came out of them. I went …

by Alexander Myasoedov · Oct 10, 2026

+Opinions and Expertise

Jev tool calling in production: pick the tool, then build the arguments.

Classifying intents with Jev is the easy part. A tool call also needs correct arguments, a risk flag and a way to say "I don't know". Here's how we …

by Alexander Myasoedov · Oct 9, 2026

+Opinions and Expertise

What is a slop grenade?

Someone uses AI to produce a big chunk of polished-looking work and drops it into other people's workflows. Making it took minutes. Judging it takes …

by Alexander Myasoedov · Oct 9, 2026

+Opinions and Expertise

How much does it cost to build an AI agent?

Around $6K for a production-minded prototype, $15K+ for an agent system with a real harness, $50K+ when the domain, data and infrastructure get …

by Alexander Myasoedov · Oct 6, 2026

+Engineering

Python 3.15 lazy imports are a fix for circular imports, not a startup trick.

Python 3.15 ships the lazy keyword this month. Most takes I've seen file it under startup speed. I think the bigger win is that the …

by Alexander Myasoedov · Oct 6, 2026

+Opinions and Expertise

Should I hire a fractional AI CTO?

Can you see user outcomes increasing with the new features you add, or are you still on a flat line, or even seeing a drop in retention after shipping …

by Alexander Myasoedov · Oct 6, 2026

+Opinions and Expertise

Always-on AI agents: the model is swappable, the harness is the moat.

OpenAI shipped Dots, scrapped GPT-6.1 Astra, and AMD bought a company that etches models into silicon, all within a few weeks. Read together, they …

by Alexander Myasoedov · Oct 5, 2026