AI Engineering That Ships

Hard-won insights from assembly language to multi-agent orchestration.

Written for engineers who care how systems actually behave in production.

Agentic infrastructure · Defense-in-depth security · Modernizing legacy systems

Featured Articles

AI Security

Securing Agentic AI: How We Found 11 Security Gaps in Our Own Framework and Built Defense-in-Depth to Close Them

Securing Agentic AI: Building Security-Conscious Agent Systems with Claude Code We found 11 security gaps in our own production framework -- then closed every one with 6 new hooks, 2 JSON schemas, 7 per-archetype security patterns, and a 3-tier trajectory monitoring system. All 10 OWASP Top 10 for Agentic Applications items are now addressed. Figure 1 - Defense in Depth: The Security Architecture: Four concentric rings protect the pipeline core. Ring 1 (red/amber) fires on every tool call. Ring 2 (blue/purple) monitors behavior patterns over time. Ring 3 (gold) enforces architectural guarantees that prompts cannot bypass. Ring 4 (green)…

Read article
Securing Agentic AI: How We Found 11 Security Gaps in Our Own Framework and Built Defense-in-Depth to Close Them

The Dotzlaw Team

Two skilled engineers building advanced agentic AI projects and research alongside me. They contribute directly to the systems, articles, and tools published on this site.

Latest Insights

View all →
Securing Agentic AI: How We Found 11 Security Gaps in Our Own Framework and Built Defense-in-Depth to Close Them AI Security

Securing Agentic AI: How We Found 11 Security Gaps in Our Own Framework and Built Defense-in-Depth to Close Them

Part 3 of 4 Building the Bootstrap Framework

We built a framework with 18 skills and 11 hooks. A security audit found 11 gaps. We closed all of them with 6 new hooks, 2 JSON schemas, a 3-tier trajectory monitoring system, and per-archetype security patterns across 7 project types.

2026-02-26 Read Article →
From Prototype to Platform: How a Framework Learned to Improve Itself Claude Code

From Prototype to Platform: How a Framework Learned to Improve Itself

Part 2 of 4 Building the Bootstrap Framework

After two production migrations, we turned the framework on itself. A systematic gap analysis identified 8 missing capabilities. Round 1 added 3 of them, expanding the pipeline from 7 to 10 steps. An independent review graded the work A-. The compound returns operate not just project-to-project but within the framework itself.

2026-02-25 Read Article →
An Agent Swarm That Builds Agent Swarms: How We Used Claude Code to Generate Claude Code Infrastructure Claude Code

An Agent Swarm That Builds Agent Swarms: How We Used Claude Code to Generate Claude Code Infrastructure

Part 1 of 4 Building the Bootstrap Framework

We built a framework where Claude Code agents analyze an existing codebase, generate tailored agent teams, hooks, and skills. Two migrations later -- the second harder but faster -- the compound returns are real.

2026-02-11 Read Article →
Claude Code Security: Building Defense-in-Depth with Five Primitives Claude Code

Claude Code Security: Building Defense-in-Depth with Five Primitives

Part 6 of 6 Claude Code

Most Claude Code projects ship with zero security infrastructure. The same 5 building blocks you use for capability -- hooks, agents, skills, commands, and teams -- become a comprehensive defense-in-depth architecture when configured for security.

2026-01-27 Read Article →
Claude Code Agent Teams: Building Coordinated Swarms of AI Developers Claude Code

Claude Code Agent Teams: Building Coordinated Swarms of AI Developers

Part 5 of 6 Claude Code

16 parallel Claude agents built a 100,000-line C compiler from scratch, a Rust-based compiler capable of building the Linux kernel across x86, ARM, and RISC-V. No single agent could hold that codebase in context. The team succeeded because focused context and parallel execution are architecturally superior to a single overwhelmed context window.

2026-01-26 Read Article →
Claude Code Hooks: The Deterministic Control Layer for AI Agents Claude Code

Claude Code Hooks: The Deterministic Control Layer for AI Agents

Part 4 of 6 Claude Code

A CLAUDE.md instruction says 'always run the linter.' The agent usually complies. A PostToolUse hook runs the linter after every file write, every single time, no exceptions. That gap between 'usually' and 'always' is where production systems fail.

2026-01-25 Read Article →
Claude Code Skills: Building Reusable Knowledge Packages for AI Agents Claude Code

Claude Code Skills: Building Reusable Knowledge Packages for AI Agents

Part 3 of 6 Claude Code

A project with 8 skills and 10,000 lines of domain documentation loads just 500 tokens at startup instead of 70,000, because progressive disclosure means agents pay for knowledge only when they use it.

2026-01-24 Read Article →
Building Effective Claude Code Agents: From Definition to Production Claude Code

Building Effective Claude Code Agents: From Definition to Production

Part 2 of 6 Claude Code

The most effective AI coding agents aren't the ones with the cleverest prompts. They're the ones with the best-designed environments. Here's how to build agents that reliably ship production software over extended sessions.

2026-01-23 Read Article →
Orchestrating AI Agent Teams: How Skills, Hooks, and Context Flow Make Autonomous Coding Reliable Claude Code

Orchestrating AI Agent Teams: How Skills, Hooks, and Context Flow Make Autonomous Coding Reliable

Part 1 of 6 Claude Code

An orchestrator breaks a task into pieces. Specialized agents pick up work items, each carrying skills that define what they know and hooks that enforce how they behave. Context flows from session start to task completion through a deterministic pipeline. Here is how the pieces fit together.

2026-01-22 Read Article →

Production Projects

View All →