AI can write the code; the unsolved problem is trusting what it wrote. I build the governance layer: specs as law, drift refused at merge, and evidence you can inspect. https://bartekus.com/ 2026-11-08T04:00:03.831Z Bartek Kus bartekus@gmail.com https://bartekus.com/writing/aicortex-memory-that-cannot-instruct 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

Persistent memory for AI clients over MCP, built so that nothing recalled can ever be read as a command. The untrusted content boundary, and the five other refusals that make it hold.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/from-enrahitu-to-rahi 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

The July chassis had four ingredients in one container. Rahi keeps two, moves everything to Rust, and becomes a library an application extends and never forks. What was traded, and what the proof actually covers.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/from-factory-to-small-tools 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

In July I described one platform: a factory, a fleet plane, tenants, certificates. In October that shape was retired. What stands in public now is a family of small tools, each making one claim that can be graded.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/retiring-six-repositories-under-governance 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

On 2026-10-07 six repositories left the public family in one reviewed pull request. A retirement is a governed act with a record. This is what that record contains, what it does not, and why that matters.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/rustev-proposals-never-grants 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

An embeddable Rust engine for decisions over partially trusted information: a definition compiles into a plan, execution is bounded, every decision leaves evidence, and the output is always a proposal.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/spec-spine-check-delta-verify 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

Since June, spec-spine gained check, delta, verify, registry plan, a family exit-code contract, a JSON envelope, per-unit shards and a renumbered corpus, and lost init. Each exists because a PR branch is a stranger's bytes.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/statecraft-cli-independent-acceptance 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

What statecraft-cli is today: one machine, one repository, no account, and a judgment about an agent's work that the agent cannot write. Specified, implemented and tested; not released.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/three-primitives-action-gate-attest-ledger-canonical-json 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

action-gate, attest-ledger and canonical-keysort-json are the three smallest claims in the family. Each refuses to do its neighbour's job, and that refusal is what lets the bigger tools make theirs.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/wire-witness-testimony-not-authority 2026-11-07T00:00:00.000Z 2026-11-07T00:00:00.000Z

A capture proxy that records the actual HTTP traffic between an agent harness and a model provider, and is built so its output can never decide anything. Why that limitation is the feature.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/enrahitu-the-whole-app-in-one-container 2026-11-07T00:00:00.000Z 2026-07-23T00:00:00.000Z

Encore.ts for typed APIs, rauthy for identity, hiqlite for replicated SQLite, Turso's libSQL underneath: the template chassis Statecraft stamps, and why zero managed-infrastructure dependencies is the entire point.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/from-open-agentic-platform-to-statecraft 2026-11-07T00:00:00.000Z 2026-07-23T00:00:00.000Z

This week I archived my flagship and rebuilt it ground-up in days. What died, what survived, and why a spec corpus made killing a quarter-million governed lines the cheap option.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/one-binary-two-faces 2026-11-07T00:00:00.000Z 2026-07-23T00:00:00.000Z

I retired a desktop app and replaced it with a Rust binary that is a CLI for humans and an MCP server for agents. The interesting part is why those had to be the same binary.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/rewriting-under-governance 2026-07-23T00:00:00.000Z 2026-07-23T00:00:00.000Z

The rename essay tells you why the platform was rebuilt. This one is the mechanic's log: specs rewritten before code, authority transferred edge by edge, agents forbidden from bending the law to match their output, and the three boot defects the gates never promised to catch.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/the-factory-is-a-service-now 2026-11-07T00:00:00.000Z 2026-07-23T00:00:00.000Z

factory-encore promised a technology-agnostic software factory. Statecraft kept the factory and shot the framework: what changed when the contract moved from a technology-free document to a versioned template.toml with a gate behind it.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/yolo-mode-is-earned 2026-07-23T00:00:00.000Z 2026-06-10T00:00:00.000Z

I run Claude Code with permission prompts off. That is safe only because of what sits underneath: a global deny floor, project hooks as reflexes, and a config that is itself governed.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/inside-spec-spine 2026-11-07T00:00:00.000Z 2026-06-09T00:00:00.000Z

The governance spine I lifted out of my platform and open-sourced: typed ownership edges, two deterministic registries, and a PR gate that refuses code drifting from its owning spec.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/production-in-the-dev-loop 2026-11-07T00:00:00.000Z 2026-06-06T00:00:00.000Z

My Kubernetes cluster behaves like an extension of local development: the agent can see everything and touch nothing, and the only write path is git.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/agentic-code-collapse 2026-07-23T00:00:00.000Z 2026-05-15T00:00:00.000Z

Agent-built codebases have a characteristic failure mode: each diff is locally plausible while the system slides into incoherence. Receipts from a quarter-million governed lines on why mine hasn't.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/owasp-agentic-top-10-against-a-real-platform 2026-07-23T00:00:00.000Z 2026-04-15T00:00:00.000Z

I mapped the OWASP ASI 2026 entries onto open-agentic-platform, control by control. The exercise kept landing on the same small set of governance mechanisms, and that is the finding.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/architecting-intent-vs-vibe-coding 2026-11-07T00:00:00.000Z 2026-01-15T00:00:00.000Z

AI can write the code; the unsolved problem is trusting what it wrote. Why review doesn't scale, and how specs-as-law makes agentic output governable.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/probabilistic-ai-behind-deterministic-gates 2026-06-10T00:00:00.000Z 2025-10-15T00:00:00.000Z

LLMs are probabilistic by design; trustworthy systems are deterministic at the boundary. The architecture rule that makes agentic output admissible.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/local-first-now-governed 2026-07-23T00:00:00.000Z 2025-09-10T00:00:00.000Z

The local-first thesis grew a governance layer: why the agentic execution plane belongs on your machine, with no SaaS in the trust path.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/identity-in-practice 2026-06-10T00:00:00.000Z 2025-05-01T00:00:00.000Z

Practical guidance on when to use each identity standard, what to avoid, and links to authoritative specs.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/design-principles-resilient-systems 2026-06-10T00:00:00.000Z 2025-01-15T00:00:00.000Z

Exploring simplicity, observability, blast radius, idempotency, and graceful degradation in distributed systems.

Bartek Kus bartekus@gmail.com https://bartekus.com/writing/rag-beyond-demo 2026-06-10T00:00:00.000Z 2024-12-28T00:00:00.000Z

Exploring indexing strategies, chunking approaches, evaluation frameworks, observability, and guardrails for production RAG systems.

Bartek Kus bartekus@gmail.com