Writing archive
Applied AI, cloud engineering, data systems, security, and the occasional argument about how software should be built.
Overlapping plugins complicate attributing coding-agent outcomes to the model or its configuration. This post distinguishes package resolution from per-run behaviour and proposes controlled comparisons using invocation traces, correctness, safety and cost.
Code repositories, documents, and agent instructions answer different questions about a software system. This guide maps generated repository wikis, codebase analysis, RAG, linked knowledge wikis, and the Open Knowledge Format to help teams choose the right documentation architecture.
The MCP authorization draft deprecates Dynamic Client Registration as a compatibility fallback, not as an OAuth mechanism globally. Client ID Metadata Documents offer portable, origin-associated metadata, but do not authenticate a running public client. This article explains the operational trade-offs, localhost impersonation risks and metadata-fetch protections that remain.
An OAuth proxy can connect MCP clients to an Entra-backed service while keeping downstream registration separate from upstream application provisioning. This conceptual walkthrough explains the two authorization transactions, per-client consent, token validation and refresh limits that make the proxy a security-critical authorization server.
Your UI is just one client now; your apps must now treat humans, LLMs, and peer agents as equal consumers.
