$ cat /var/log/thoughts

Architecture + Security

Posts matching all selected tags.

Filters2

6 posts

Cloudflare Virtual Wallets are the subaccount for APIs

Cloudflare Virtual Wallets are the API-key subaccount. Claim the handle this week, pick three spending caps, and never hand the Account Wallet to an agent.

Deep DivesCloudflareSecurityDeveloper ToolsAI CodingArchitectureTrend Commentary1 min read · Aug 25, 2026

MCP went stateless and the session just moved

Stateless MCP deleted the protocol session. Continuity now rides in requestState on retry. Delete sticky routing, keep the store for carts and tokens.

Deep DivesMCPCloudflareArchitectureDeveloper ToolsAI CodingSecurity1 min read · Aug 23, 2026

MCP is now traffic a firewall can name

MCP traffic detection now matches protocol headers, not mcp in the hostname. Treat the next remote MCP install as a named network event, not a config tweak.

Deep DivesMCPCloudflareSecurityDeveloper ToolsArchitectureNetworkingAI Coding1 min read · Aug 22, 2026

Isolate sharing is a Spectre channel on Workers

Workers Spectre is isolate sharing on the edge. A JWT in neighbor heap leaked at 12 bit/s in production. Keep secrets on env rather than module scope.

Deep DivesCloudflareSecurityServerlessEdge ComputingArchitectureDeveloper Tools1 min read · Aug 21, 2026

The Hugging Face break-in was a swarm with a scratchpad

The Hugging Face break-in was a swarm with a scratchpad. Watch the shared eval cache, because a wipe only kills the process sitting in front of you now.

Strong OpinionsAI CodingSecurityArchitectureTrend CommentaryDeveloper Tools1 min read · Aug 14, 2026

Apple AI Strategy Traded The Frontier For Distribution

Apple AI strategy now rents a frontier model from Google. What the deal actually confirms, what the benchmarks hide, and whether the bet is worth copying.

Strong OpinionsMLTrend CommentaryMobileSecurityArchitecture1 min read · Jul 28, 2026