A Tool-Using Agent Needs Server-Side Authorization
Treat model-generated tool calls as proposed actions. Validate permissions, scope, arguments, budgets, and approval at execution time.
Agentic Systems 3 min read
Notes from building and operating AI systems, commerce platforms and the measurement around them.
Treat model-generated tool calls as proposed actions. Validate permissions, scope, arguments, budgets, and approval at execution time.
Agentic Systems 3 min read
Plan AI search for company documents around source ownership, employee access, current answers and the real questions your team struggles to resolve.
AI for Business 4 min read
How I approach Moventoro’s shared order lifecycle across planning, warehouse operations, drivers, tracking and administration.
Backend Architecture 3 min read
Tie approval to a concrete action, target, input version and lifetime, so an agent cannot carry permission from one proposal into a different operation.
Agentic Systems 3 min read
Inside Velgrina’s AI Remodel feature: kitchen-photo understanding, image generation, daily limits and an administrative provider switch.
AI Engineering 3 min read
Design customer onboarding automation around completed setup, clear ownership and a first useful outcome, with AI helping to interpret incoming information.
AI for Business 4 min read
A reliable streaming response needs explicit lifecycle events, bounded buffering, upstream cancellation, and a clear policy for partial answers.
Backend Architecture 3 min read
Scope an AI agent proof of concept around one business question, representative cases, clear exclusions and an agreed decision about the next step.
AI Automation Consulting 4 min read
A project note on Velgrina’s streaming AI product-help chat and the difference between a fluent answer and a useful shopping interaction.
AI Engineering 3 min read
Compare custom AI development and no-code tools using integration depth, ownership, exceptions and operating effort before choosing how to build.
AI for Business 3 min read
Use an outbox to connect database changes with event publication, then address duplicate delivery, ordering, and external side effects separately.
Backend Architecture 3 min read
Design agent jobs around persisted decisions and accepted effects, so an interruption does not force the system to guess what already happened.
Agentic Systems 3 min read