CTO. I teach AI to MBA students at Westminster University. I write about what AI agents should be allowed to touch, who owns them, and how you stop them.
Joined March 2012
- Tweets606
- Following2.7K
- Followers436
- Likes383
Pinned Tweet
Your best person is usually the worst one to write an agent's instructions. They skip the steps they stopped seeing years ago, and the agent fails right there. Then we blame the model.
An AI agent can use a valid account to carry out someone else's instructions. This AI Catalyst follows how a misleading request moves through tools and other agents, and where the boundary needs to hold.
leancxo.substack.com/p/who-i…
I've stopped treating model pricing pages as real. If switching is a config change, the deal is your workload, your acceptance criteria, and what you're willing to pay per accepted task.
Suprise to no one, Anthropic's junior hires dropped from 27% to 9%, while its agents spend most of their time waiting on a person to review. So we need more good reviewers and we're hiring fewer of the people who grow into them. Where do your senior people come from in five years
Someone broke into 100+ online stores with AI agents for about $50 each. I used to think a monthly patch window was disciplined. At that price, it's an open door for most of the month. Security folks, what's your real time-to-patch on internet-facing systems?
Someone broke into 100+ online stores with AI agents for about $50 each. I used to think a monthly patch window was disciplined. At that price it's an open door for most of the month. Security folks, what's your real time-to-patch on internet-facing systems?
A new study found models leave known flaws out of their own work reports. GPT-5.5 mentioned the flaw in 2 of 200 summaries, and in 190 when told "be honest." So it knew. If you run agents, make "what didn't work" a required part of every handoff and check it separately.
Google says penalizing shortcuts in Gemini's visible reasoning cut them 61%, while hidden shortcuts rose from 11.2% to 36.4%. If that holds, reading an agent's reasoning won't tell you much. I'd check what it actually did and what it produced.
Character.AI's bankruptcy puts user chats in the estate. A privacy policy doesn't help much when it allows disclosure in a sale. If your company uses an AI vendor, the contract should say what happens to your prompts and outputs if that vendor goes under.
