The Blog
Practical articles on AI, web development, fractional CTO strategy, and growing your business through technology.
Architecting Trust: An Executive's Field Guide to AI Security
Eight short parts that turn AI security from a black box into decisions you can own. Learn to ask the right questions of any tool or vendor, and tell a real ans…
Architecting Trust, Part 0: Introduction & the Four Questions
The handful of ideas you need to make a confident decision about AI in your business, illustrated with documented incidents at real companies. No code required.
Architecting Trust, Module 01: How AI Actually "Thinks"
Two simple facts about how AI works explain almost every risk you'll face: it keeps no memory of its own, and it has no built-in way to rank the instructions it…
Architecting Trust, Module 02: Prompt Injection, the #1 AI Risk
The attack at the top of every AI risk list is made of nothing but words. Here's how prompt injection works, and the three-part combination that turns it from a…
Architecting Trust, Module 03: The Stealth Frontier
The obvious defense against prompt injection is to filter out the bad instructions. Here's why that gives false comfort, the ways an attack hides from both your…
Architecting Trust, Module 04: When AI Can Act
A chatbot that only talks can embarrass you. One that can act can spend, send, or delete on your behalf. How to scope what an AI is allowed to do, gate the acti…
Architecting Trust, Module 05: Measuring Trust
A great demo is not a quality bar. How to actually prove an AI works, the three checks that catch a confident made-up answer, and five questions that reveal whe…
Architecting Trust, Module 06: The Executive Playbook
The whole guide assembled into one posture: no single wall, layered defenses that each assume the last one fails, a separation of trust to contain the worst cas…
Architecting Trust, Module 07: Your AI Readiness Self-Assessment
The interactive finale. Score one real AI system: weigh its exposure against your containment, get a readiness band, and leave with a short, prioritized list of…
Architecting Trust, Appendix: Sources & Glossary
Every claim in the Architecting Trust guide traced to a documented, public source you can check, plus a master glossary of every term, alphabetized.
RICCE in Action: A Real Walk-Through
In the previous post I introduced RICCE and the MCP server I built around it. Here's that MCP in action on a real project of mine — turning a one-paragraph idea…
The Booking Assistant That Never Sleeps: How a Smart Chat Window Saves Restaurants Time, Staff, and Lost Reservations
A 24/7 virtual booking assistant that captures reservations, answers menu and hours questions in any language, and hands off to a human when needed — for restau…
Showing 1–12 of 80 articles