Notes from building an autonomous action layer.
Design decisions we had to make and would have wanted to read about first. One post is up; the other two are being written and are listed so you can see what is coming rather than an empty page.
Why the circuit breaker is compiled into the binary, not prompted
A system prompt that says "never drop a table" is a request. A Go type that has no branch reaching DROP is a guarantee. Why we moved the safety boundary out of the model and into the compiler.
Read the postStructural tokenization: sending stack traces to a model without sending secrets
Redaction destroys the shape a model needs to reason. Substituting deterministic hashes preserves variable structure and stack trace geometry while removing every sensitive value. What that costs, and where it breaks down.
The mathematics of blast radius: what 1% of traffic actually buys you
A 1% cell over a six-minute window is a sample size, not a slogan. What regression magnitude that sample can detect, what it cannot, and why the window is the number nobody tunes correctly.