Blog · 13 posts
Notes, and the corrections.
What we are working on in post-quantum migration and verification, including the results that did not hold.
A message from another agent is information, not permission
As agents start calling other agents, the failure that bites first is treating a peer's message as authority. A signature proves who spoke, not whether they were allowed. Authentication is not authorization, and a short list of unglamorous properties is what earns trust.
Read17 September 2026We Asked Six Models a Question. Every One That Answered Agreed. The Bug Was in the Question.
Several models converging on the same answer looks like evidence. We caught the case where it was our own prompt talking, and ran the blind control we should have run first.
Read28 August 2026Attestation of Scrutiny: Adversarial Provenance for AI-Era Artifacts
Provenance answers who made an artifact. Attestation of scrutiny answers why you should believe it: a signed, offline-verifiable record of what an artifact survived under adversarial examination. A defensive publication, placed in the public domain as prior art.
Read31 July 2026The AI Model Risk Rule Everyone Cites Died in April
SR 11-7 was replaced in April 2026. Its replacement puts agentic AI outside its own scope and says it sets no enforceable standards. Here is what actually binds an AI agent in finance right now, checked against the primary sources, with links so you can check it yourself.
Read27 July 2026Upload Date Is Not Recording Date (4 of 4)
Someone sends you a link and asks what's in it. Three layers of the stack told me confident lies in a row. A missing dependency reported as fact, ninety-five minutes of fluent invention from a wrong-language model, and a year-old talk stamped with last week's date. None of them errored.
Read27 July 2026Your Reward Function Is the Attack Surface (3 of 4)
Anything you optimize, you eventually optimize the measurement of, through gradient rather than malice. A reward function with one target metric isn't a specification; it's an attack surface with a clearly marked entry point. On held-out instruments, and the two ways our own gauges fooled us.
Read27 July 2026The Swarm That Can't Ship an Unverified Claim (2 of 4)
Fan out a hundred agents and you get a hundred times the work, and a hundred times the assertions about it, arriving faster than anyone can check them. What happened when we made the ungated configuration structurally impossible, including the bug that proved the point at our expense.
Read27 July 2026Graph Engineering, From Someone Who Actually Runs the Graph (1 of 4)
Fan out N agents, put a verifier on the edge, never let an agent grade its own homework. The advice is correct, and almost universally written by people who have never had to live with it. One concrete run against a 75-claim registry, including the finding that fell over afterward.
Read21 July 2026We Retracted Three of Our Own Quantum Claims. Here Is What Each One Got Wrong.
Three results we wanted to keep did not survive a second look at our own raw data. The retractions are on the record. Each one taught a specific lesson about nulls, labels, and what counts as evidence.
Read21 July 2026Why Null Results Are Our Best Marketing
We wrote up a quantum key recovery as a success. Then an outside question sent us back to our own data, the key turned out to come from the classical half of the pipeline, and we said so. Why the corrected version is the stronger one.
Read21 July 2026HARBINGER: Dark-Fleet Risk From Public Data, No Satellites Required
Seven per-vessel behavioral detectors over public AIS tracks, a risk band per vessel, and a plain-language narrative an analyst can check. No satellite imagery, no paid feeds. How it scores, what one test on a real NOAA reserve did and did not show, and what it still gets wrong.
Read21 July 2026Ten PQC Tools, One Migration Path, and What Each One Actually Runs
A post-quantum toolset built around one migration path, from inventory to compliance. What each tool does, which standards it runs, which are demonstrations, and which one is not on-premises.
Read27 April 2026No, RSA-1024 Was Not Broken. Here's the Math.
A screenshot claiming RSA1024-1 was factored by a home-built QPU went viral with 329K views. The math says otherwise. Here's the full breakdown.
Read