https://akillness.github.io/Field notes on AI agents, harness engineering, and game AI from an AI product engineer with 8 years shipping production systems at NCSOFT and Com2uS. Verified code, primary-source analysis, and honest tradeoffs. 2026-09-16T01:22:54+09:00 Fodev JEO https://akillness.github.io/ Jekyll © 2026 Fodev JEO /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2026-09-16T00:07:21+09:00 2026-09-16T00:07:21+09:00 https://akillness.github.io/posts/open-connector-default-custody-audit/ Fodev JEO

Source Audit of oomol-lab/open-connector: the security policy’s do-not-report list names the defaults its quickstart ships, and anonymous proxy calls outrank scoped tokens.

2026-09-15T10:50:36+09:00 2026-09-15T10:50:36+09:00 https://akillness.github.io/posts/unity-mcp-release-notes-drift-audit/ Fodev JEO

Source Audit of CoplayDev/unity-mcp: the script built to stop stale release notes ships a –check mode no workflow runs, and its two files sit four releases behind.

2026-09-14T00:41:41+09:00 2026-09-14T11:24:20+09:00 https://akillness.github.io/posts/solpi-capability-floor-composition-audit/ Fodev JEO

Source Audit of NVlabs/SoL-Pi: a per-mechanism capability gate permits losses that accumulate until the assembled harness retains roughly 94% of Pi’s EdgeBench average.

2026-09-13T23:12:40+09:00 2026-09-13T23:12:40+09:00 https://akillness.github.io/posts/tradingagents-librechat-self-hosting-audit/ Fodev JEO

A pinned-commit read of TradingAgents and LibreChat: what adopting open source actually transfers, what it never removes, and why these two are not substitutes.

2026-09-13T12:57:05+09:00 2026-09-13T12:57:05+09:00 https://akillness.github.io/posts/ripwire-claim-guard-artifact-audit/ Fodev JEO

Source Audit of redhat-et/ripwire at 1cf3086e: the gate count reads 612 in three guarded source files and 606 in the committed showcase deck the README links.