Blog
An agent is a model in a loop with tools it can really call and results it can really see. Taking the ReAct pattern apart in go-tool-base.
Recording a voice clone in a wardrobe, what it sounds like when the accent slips, and the line I drew about where my synthetic voice may go.
If the platform hosting your code also hands out the key that verifies it, the signature proves nothing. Where to publish a public key instead.
TikTok's OAuth flow wants you to copy a code out of a web page and paste it into a terminal. What it took to give keryx a native flow instead.
A soft launch for Scout, an AI co-dungeon-master for long tabletop campaigns, and why it will never speak to the players.
Opening a public marketplace for agent workflows meant publishing an attack surface, and then having to defend it from my own convenience.
Launching sigillum, a standalone artefact signing and verification CLI, and the Rust signing problem that made it necessary.
Where a signing key lives is the most provider-specific decision in the whole business, so the framework deliberately refuses to have an opinion.
Leaving a healthy dependency: cockroachdb/errors predates Go 1.20, so its Join hides the aggregate and everything below it goes missing.
A standard-library security fix forced a Go version bump, and then the release failed because the build image shipped an older toolchain.
go-tool-base
Pioneering
Soapbox
signing
keryx
First Light
errors
krites