Writing
Blog
Notes on web design, development and building for the web - from the two people who do the work.
The Boundary I Stated Out Loud Had a Shelf Life
From 14 August, Claude Code runs in auto mode by default and a classifier approves tool calls instead of me. Anthropic has the numbers to justify it and they are not close. The part that changed how I work is buried in the docs: a boundary you state in conversation is stored in the transcript, and the transcript gets compacted
Aug 12, 2026 · Robert Bojor
The Second Agent Is Not a Second Source
Two of my research agents returned the same claim citing the same URL, and the URL did not say it. I caught that and felt clever. Then I found out the claim was true, my correction had thrown away a real fact, and the independence I thought I was buying had already leaked out through three channels I never looked at
Aug 10, 2026 · Robert Bojor
Caught by the Spelling, Not the Signature
An AI image won a city photography contest and a stranger caught it by reading the gibberish on a worker's vest. Every provenance system we have built is a way for an honest person to declare something. None of them is a way to check
Aug 7, 2026 · Robert Bojor
Isolation was never on the list
Anthropic documents git worktrees as a way to stop parallel sessions colliding. Its page on choosing isolation for your threat model does not list them at all. Its changelog has six fixes in twenty-eight days stopping worktree-isolated agents from reaching the main checkout. All three of those are true
Aug 5, 2026 · Robert Bojor
A Clock Is Not an Assertion
A test in one of my own projects failed eight times out of twelve on a busy machine. It was not flaky. It was reporting a shutdown bug that would have logged a crash on every restart, and the wall-clock wait I was about to lengthen is exactly what had been hiding it
Aug 3, 2026 · Robert Bojor
The Engine Larian Is Already Throwing Away
Hasbro owns Baldur's Gate, has a billion dollars for games like it, and cannot find anyone to build the sequel. Larian said no. The man who wrote Baldur's Gate 2 said no. The thing everyone now wants to license is the one its owner has already outgrown
Jul 31, 2026 · Robert Bojor
The Protocol Stopped Remembering You
MCP shipped its 2026-07-28 spec and deleted the handshake, the session, and the server's ability to call back into your model. The operational case for it is good. The bill lands on everyone who now has to hold the state themselves
Jul 29, 2026 · Robert Bojor
The Vulnerability Was the Easy Part
Traefik published a response-poisoning advisory this morning and my proxy was on an affected build. Patching it took ninety seconds. Everything that broke afterwards was something I added to make sure it never happened again.
Jul 27, 2026 · Robert Bojor
They metered the road and locked the gate
CCP wants EVE Online's map to feel big again, so it is putting a battery on the jump bridges that shrank it. The battery is the good idea. The access list quietly buried underneath it will do the opposite of what it was built for.
Jul 24, 2026 · Robert Bojor