airoweb

airoweb blog

All posts

Notes, checklists, and explainers on AI workflows, internal tools, MCPs, review habits, and automation decisions.

9 min read

AI infrastructure

The agent updated the record. The notification never left.

Two ordinary writes create a crash gap between an agent's decision and its external effect. Commit the decision and an outbox event together, then let a conventional relay handle delivery.

AI infrastructureagentsreliabilityevent-driven architecture

7 min read

Company adoption

AI governance needs decision rights, not another committee

A steering committee cannot own the daily decisions inside every AI-assisted process. Define who owns the governance system, the workflow, the platform, specialist review, and residual risk.

adoptiongovernanceoperating modelaccountability

9 min read

AI infrastructure

A running flag is not a lock for your agent queue

A task marked running can stay stuck after a worker dies, then collide with a replacement if the old worker returns. Expiring leases make ownership recoverable; guarded writes keep stale workers from acting.

AI infrastructureagentsqueuesreliability

9 min read

Company adoption

Stop measuring AI literacy by course completion

A completion record says someone received training. A useful AI literacy programme shows that they can recognize the limits, data boundaries, review duties, and escalation points of the AI-assisted work they actually perform.

adoptionAI literacygovernancetraining

7 min read

AI infrastructure

Valid JSON is not permission to act

A schema can make an agent's output parseable without making the requested action correct or permitted. Put a conventional policy-enforcement layer between model proposals and production writes.

AI infrastructureagentsstructured outputssecurityworkflow

7 min read

Company adoption

Measure the AI workflow, not how often people open the tool

License activation and prompt activity show that an AI product is being used. A workflow scorecard shows whether the work is better, where costs moved, and whether the risk remains acceptable.

adoptionmeasurementoperationsgovernance

8 min read

AI infrastructure

Give your agent a key, not the keyring

An agent that needs to pull one report should not be handed a credential that can also move money. Scope the secret to the run, keep it out of the model's view, and treat anything it touched as already leaked.

AI infrastructuresecuritysecrets managementagents

7 min read

Company adoption

Design the AI workflow's off switch before you need it

AI programs design the intake, the pilot, and the rollout, then never plan the shutdown. Here is how to turn an AI workflow off — planned retirement and emergency stop — with owners, triggers, and fallbacks set in advance.

operating modelgovernancerolloutlifecyclerisk

8 min read

AI infrastructure

Assume your agent will run the workflow twice

The reliability question for connected agent workflows is not whether a step runs, but whether running it a second time is safe. Design acting steps to be repeatable with idempotency keys, server-side dedup, and retries that back off.

AI infrastructureagentsworkflowreliability

20 min read

AI workflow

Your agent logs are a mirror: a self-audit from AI session history

Your AI session logs are an unperformed record of how you actually work. A coding agent can turn them into an honest audit — if you run it locally, redact on read, and reject any confident-but-unsupported insight.

coding agentsself-auditprivacypromptsworkflow

10 min read

AI infrastructure

Give coding agents a workbench, not a workstation

Coding agents should start inside a bounded workbench: scoped files, controlled network, no ambient secrets, explicit command approval, and a pull request as the first durable output.

coding agentsAI infrastructuresecuritydeveloper tools

8 min read

AI infrastructure

Keep SOUL.md out of the agent junk drawer

A useful SOUL.md is not a place to store every instruction. It should define durable identity, voice, values, and hard boundaries, while project rules and repeatable workflows live in more specific files.

agentsSOUL.mdHermescontext engineering

7 min read

AI infrastructure

Treat MCP servers like production APIs

An MCP server that reaches company systems needs the same operational discipline as an internal API: ownership, versioning, access control, telemetry, and retirement criteria.

MCPAI infrastructuresecurityplatform engineering

6 min read

AI infrastructure

Decide which agent tool calls need human approval

Before connecting an agent to tools, classify each action by data access, reversibility, business impact, and the approval step required before it runs.

agentsMCPsecurityworkflow