Field notes
What we learn building SpotAgentIQ and running agents against real systems. RSS.
-
How to require human approval for specific MCP tool calls
Let the agent read freely, ask before it sends or spends, and refuse card numbers outright. A working policy, line by line.
-
Tamper-evident audit logs in 40 lines: hash chains explained
Why an append-only file with a SHA-256 chain is better evidence than a database row, and what it can't protect you from.