A Confirmation Is Not a Boolean: Designing Stateful Agent Workflows
Why "yes" is not always approval, and how interruption, suspension, resume, revalidation, and durable state make consequential agent workflows safe.
Writing topic
Agent Reliability
Keeping execution authority outside the model: typed proposals, deterministic policy, durable confirmation, revalidation, idempotency and audit.
Agent Reliability writing
Read
The Write May Have Succeeded: Handling Unknown Outcomes in AI Agents
A timeout after a customer-impacting action does not mean the action failed. How action identity, idempotency, database constraints, and unknown-write handling prevent agents from duplicating business effects.
Memory Is Context, Not Authority
Persistent agent memory is useful only if remembered text cannot become permission. A practical boundary for scoped memory, consent, DLP, TTL, and authority isolation.
Testing AI Agents Without Pretending They Are Deterministic
Deterministic integration tests and real-LLM tests answer different questions. How to use both to verify control-plane invariants and probe semantic quality.
Decision, Authority, Execution: Observability for AI Agents
For consequential agents, intent, authority, and execution must be observable separately. A practical operator view for workflow state, policy, evidence, replay, and traces.
How I Keep Prompt Injection Away from Agent Tools
A defense-in-depth boundary that treats model output, retrieved text, and remembered context as evidence while deterministic software keeps execution authority.
Designing Guardrails for Production AI Agents
A practical execution model for tool-using agents built from typed proposals, deterministic policy, durable confirmation, revalidation, idempotency, and audit.