Posts


Sep 10, 2026

From Agentic Sessions to an Engine

How isolated coding agents, Git coordination, and separate post-processing became an execution engine for continuous security research.

Sep 6, 2026

Triage Needs Fresh Context

Why security findings need a fresh context with the opposite mandate.

Sep 6, 2026

Task Swarms Blur Roles

Why leader-centric agent swarms do not preserve distinct security-research techniques.

Sep 6, 2026

One Context Is Not a Security Team

Why a broad suite of security skills makes focused research hard to repeat.

Jun 11, 2026

What's Left When the World Becomes Agentic?

A retroactive look at the last six months: the question I kept dodging, and the answer I landed on.

May 15, 2026

Rendezvous Gets a Trophy Case

A thank-you DM turned into a trophy case - a new home for the bugs Rendezvous caught before prod did.

May 14, 2026

Shipping to Echidna

Four PRs into Echidna, the OG smart contract fuzzer that taught the whole space how this is done.

Dec 3, 2025

Rendezvous: Let Clarity Fuzz Test Itself

From the PoX-4 stateful testing harness to the first native Clarity fuzzer - why we built Rendezvous and the principles it stands on.

Sep 2, 2025

The PoX-4 Bug Hunt

How we used stateful property testing to uncover three hidden bugs in PoX-4, the contract at the core of Stacks consensus.

Aug 25, 2025

The Ice-Breaker Test

Small progress beats no progress. Start with simple ice-breaker tests to prove your setup works, then iterate toward complexity.