Writing
Notes from production
Applied AI in production environments, backend architecture, and notes from doctoral research. Written to be useful, not to rank.
-
Permissions that travel with the person
An AI assistant should own no permissions. It borrows the rights of the person using it, and that single design choice bounds every attack path.
-
What an internal MCP server actually solves
An internal MCP server does not make the model smarter. It gives authentication, permissions and audit a place to live between assistants and data.
-
The demo is the easy part
A demo proves the happy path exists. The system that runs every day on uncurated inputs still has to be built, and that is most of the work.
-
The masking layer matters more than the model
A masking layer decides what sensitive data ever reaches a language model. Why that design choice outweighs model selection in production AI.