Search
Found 20 articles
The 74k-star Open-Source Life Guide: What Its Evidence Grading Is Worth Copying
A breakdown of a GitHub project with 74,249 stars: 772 recommendations, 2,597 primary sources, and an A/B/C evidence grading system. Compared against our T0-T5 trust model — three ideas worth borrowing, two not.
AI Supply Chain Poisoning: When the Risk Hides in Models, Data, and Tools
An AI system's supply chain is far more complex than traditional software: model weights, training data, dependencies, external tools (MCP), and even prompts themselves can be tampered with. This article breaks down five links, why detection is so hard, and five practical defensive principles.
Cloud Identity and Permissions: Where the New Access Cards Live
When workloads move to the cloud, credentials change shape entirely: no longer usernames and passwords but service principals, roles, temporary credentials, and CI/CD secrets. This article explains four concepts, five common blind spots, and a practical order for tightening things up.
The Double-Graph Architecture: Separating "What the Target Is" from "How Far We Have Tested"
Most automation systems track progress in a single state table — and end up with facts and reasoning contaminating each other: unverified guesses get treated as confirmed assets, and work proceeds on false premises. This article unpacks a rare design that splits the truth store from the per-task reasoning chain into two graphs joined by anchors — and why that pattern deserves attention from any long-running AI agent system.
Isolated Research Practice: How to Study an Offensive Tool Safely
Studying offensive tooling is a necessary part of security work, but "researching" and "using" must be separated by technical boundaries, not willpower. Using a real isolated deployment as the example, this article covers network isolation, port binding, resource limits, tool verification, and five red lines.
The Economics of Ransomware: Why It Persists and How to Make It Unprofitable
Ransomware is not a technical problem; it is a business. Understanding its cost structure, revenue model, and risk pricing is what allows effective defence. This article analyses the business through an economic lens and explains three levers for making attacks unprofitable.
Supply Chain and Third-Party Risk: When Your Attack Surface Is Not in Your Own Building
Much of a modern enterprise's attack surface sits outside its own control: open-source packages, outsourced providers, cloud dependencies, SaaS tools. This article unpacks the risk mechanics of four supply-chain links, shows how attackers borrow a path in, and includes a third-party risk checklist you can use directly.
Zero Trust Architecture: Not a Product Purchase but a Change of Assumption
In vendor decks, "zero trust" often becomes a product name; fundamentally it is only a change of assumption — no longer assuming the inside is safe. This article unpacks three core principles, four implementation layers, five common misconceptions, and why it is the same work as credential governance and insider threat management.
Internal-Document Knowledge-Base Q&A System
Can't find company policies or process docs, and keep asking colleagues instead? This article shows how to build an intelligent Q&A system with AI + RAG, so employees ask questions right in their instant-messaging tool and get accurate answers with the source document attached. The focus is on designing for retrieval accuracy and a miss-tracking mechanism.
Social Media Content Calendar Management System
Struggling every day over what to post? This article teaches you how to use AI to generate content ideas automatically, schedule publishing, and optimize strategy from the data. The focus is on designing 'content quality control' and 'the balance between automation and human creativity'.
Automated Weekly-Report Generation System
Spending 3-4 hours every week collecting data, organizing progress and writing the report? This article shows how to use AI to pull data automatically from tools like Jira, Salesforce and Notion and generate a structured weekly-report draft, so you spend just 15 minutes confirming it and adding insight. The focus is on designing the balance between integrating data sources and adding human value.
AI Compliance and Risk Boundaries: The Legal Checklist for Enterprise Adoption
The legal homework before AI adoption is not 'find one regulation to comply with' but inventorying the risk dimensions clearly, asking the right questions, and demanding the right documents. This article gives you an inventory framework for five risk dimensions, a question list you can take straight into the legal meeting, a vendor-document request table, and the items to add to internal policies plus per-scenario management methods.
Compliance Boundaries for Investment-Research AI: Disclaimers, Audit Trails and Traceability
When you put AI into an investment-research workflow, compliance is not one disclaimer line at the end of a report — it is a system-design problem: does the output constitute investment advice, are the data sources licensed, and can every conclusion be traced back to its inputs and prompt versions. This article gives a risk-dimension inventory, an audit-trail architecture, human-review checkpoint design, a question list to take to legal, and a route for strengthening internal policy.
Building Organizational AI Capability: From Individual Heroes to Repeatable Processes
A few people in the company being great at using AI does not mean the organization has AI capability. This article is about turning personal experience into organizational assets: capability inventory, seed users and a three-stage rollout path, consolidating personal prompts into a skill library and a template library, tiered training and documentation, and the dimensions and common failure modes for measuring whether it really landed.
Turning Earnings Call Notes into Investment Key Points
Turn a one-hour earnings call into a usable research record: get the transcript, break down the management presentation and the Q&A, compare guidance changes, spot wording changes, distinguish factual statements from evasive answers, and finish with a source-annotated key-points page and a to-verify list.
Automatically Turning Meeting Notes into Assigned Action Items
When a meeting ends and its action items sink without a trace, that is one of the most common hidden drains in an organization. This article breaks down the complete automation of record and transcribe → extract action items and owners → push assignments → auto-recap before the next meeting, focusing on how to design the human-confirmation step so the system saves effort and stays trustworthy even when extraction accuracy is imperfect.
The Ultimate Comparison of 7 AI Agent Loop Engineering Architectures: From while(true) to Multi-Agent Orchestration
A comparison of seven agent loop architectures: Claude Code, Cursor, Aider, Cline, SWE-agent, OpenHands, and our in-house Loop Engineering. Covers five dimensions: loop shape, tool execution, context management, error recovery, and verification mechanisms.
Skill Curator: When Your Agent Has 125 Skills but Only 64 Survived
A practical record of skill curation: the fully automated process from 'never adapt after download' to '99.2% health'. Six-stage full lifecycle management, three-layer diagnostics, six-language auto-injection, and scenario generation.
OpenClaw Productivity Revolution: 22 Automation Solutions Reshaping Daily Workflows
From Personal CRM to Second Brain, from multi-channel customer service to autonomous project management, a deep dive into the 22 most practical productivity automation solutions in Awesome OpenClaw Use Cases, with architecture analysis and practical recommendations.
LM Studio Installation and Usage Guide: GUI Local LLM Management
Complete LM Studio guide: download, manage, and run local LLMs on Mac through a graphical interface, supporting GGUF and MLX formats and providing an OpenAI-compatible API.