Posts tagged security.

An attacker can steal your API credentials while your application carries on working. Canaries can make some of that hidden activity visible.

Anthropic's Glasswing is for enterprises with six-figure security budgets. The rest of us need open-source security agents that learn our systems and act autonomously.

Anthropic has an internal platform for running Claude Code in full-permission isolation. I built my own version with Firecracker MicroVMs, Go, and a $400 Ryzen box.

Four architectural patterns from NanoClaw's tiny codebase that translate directly to production web apps and SaaS — credential sidecars, infrastructure-level isolation, polling loops, and Postgres as your message queue.

I pulled apart NanoClaw's 8,000-line codebase and found six architectural patterns that most SaaS teams should steal — credential proxies, container isolation as authorization, two-cursor message processing, and more.