/now
What I'm working on right now
Live activity feed: GitHub events on my 6 production repos, Medium + Substack writing, calendar availability. Refreshes every 15 minutes. Inspired by nownownow.com.
Shipping right now
Last 14 days of pushes to agent-airlock, agent-audit-kit, verdict, mnemo, provael, and this site.
- Merge pull request #48 from provael/feat/ci-security-gateprovael
315aefc - docs: document the continuous + signed CI security gateprovael
df5ddd6 - chore: bump version to 0.23.0provael
863eb31 - feat(ci): continuous self-maintaining checkpoint gate + signed artifactprovael
84fe9aa - feat(regression): Ed25519-signed per-checkpoint regression attestationprovael
27a7fe8
Writing this month
- SubstackThe budget gate is the seatbelt: what running 15 agents taught me about cost before dashboards
- MediumWe Gave Our Agents Fewer Tools. They Got Better.
- MediumI jailbroke a robot’s brain with one sentence. Then I open-sourced the tool.
- SubstackI jailbroke a robot's brain with one sentence. Then I open-sourced the tool.
Talking
Open to podcasts, conference talks, and 1:1 advisory sessions on agentic AI, LLMOps, and AgentOps.
Reading
- Project Glasswing announcement, Anthropic
Mythos Preview is the upstream attacker model. Decides what agent-audit-kit needs to detect next.
- OWASP Agentic Top-10 RC
Mapping current agent-audit-kit coverage against the upcoming RC release.
- Salt Security 1H 2026 report
88% of enterprises had agent-security incidents: agent-airlock's market sizing.
- VLA red-teaming: SmolVLA, π0, OpenVLA papers + LIBERO
Current focus: building Provael, the red-team & assurance layer for physical AI. Mapping which vision-language-action attacks transfer from simulation to real policies.