Cybersecurity, agentic AI, and local agent field notes.https://seanmcquilling.com/en-ushttps://seanmcquilling.com/blog/mitre-atlas-for-aisecops/https://seanmcquilling.com/blog/mitre-atlas-for-aisecops/MITRE ATLAS gives AI security teams a shared map of adversary behavior for threat modeling, detection engineering, red teaming, and incident response.Sat, 18 Jul 2026 16:30:00 GMThttps://seanmcquilling.com/blog/owasp-agentic-top-10-for-aisecops/https://seanmcquilling.com/blog/owasp-agentic-top-10-for-aisecops/The OWASP Agentic Top 10 moves security beyond model output and into goals, tools, identities, memory, delegation, and runtime control.Sat, 18 Jul 2026 16:20:00 GMThttps://seanmcquilling.com/blog/owasp-llm-top-10-for-aisecops/https://seanmcquilling.com/blog/owasp-llm-top-10-for-aisecops/The OWASP LLM Top 10 turns common language-model failure modes into security requirements, tests, telemetry, and response plans.Sat, 18 Jul 2026 16:10:00 GMThttps://seanmcquilling.com/blog/nist-ai-rmf-for-aisecops/https://seanmcquilling.com/blog/nist-ai-rmf-for-aisecops/NIST AI RMF gives an AI security program its operating model: govern the work, map the context, measure the risk, and manage what happens next.Sat, 18 Jul 2026 16:00:00 GMThttps://seanmcquilling.com/blog/zero-trust-is-the-foundation-ai-agents-need/https://seanmcquilling.com/blog/zero-trust-is-the-foundation-ai-agents-need/Anthropic's framework connects agent identity, least agency, tool boundaries, memory integrity, and recovery into one practical security model.Sat, 18 Jul 2026 15:30:00 GMThttps://seanmcquilling.com/blog/a-feature-is-not-shipped-until-it-works/https://seanmcquilling.com/blog/a-feature-is-not-shipped-until-it-works/Four failures in Aria's voice input taught me why a green build and a working development demo are not enough.Thu, 16 Jul 2026 18:00:00 GMThttps://seanmcquilling.com/blog/when-agent-autonomy-produces-activity/https://seanmcquilling.com/blog/when-agent-autonomy-produces-activity/An audit of Aria's autonomous loop found hundreds of goals, almost no progress, and a completion system that rewarded plausible output.Thu, 16 Jul 2026 17:00:00 GMThttps://seanmcquilling.com/blog/research-agents-need-a-consumer/https://seanmcquilling.com/blog/research-agents-need-a-consumer/Aria produced hundreds of useful research reports that nothing ever read. The fix was a small, idempotent consumer pipeline.Thu, 16 Jul 2026 16:00:00 GMThttps://seanmcquilling.com/blog/the-observer-changes-the-agent/https://seanmcquilling.com/blog/the-observer-changes-the-agent/A self-observation feature for Aria showed why metrics should remain available without becoming permanent instructions.Thu, 16 Jul 2026 15:00:00 GMThttps://seanmcquilling.com/blog/the-bigger-model-lost-the-bakeoff/https://seanmcquilling.com/blog/the-bigger-model-lost-the-bakeoff/What two rounds of testing Aria's language and image models taught me about speed, benchmarks, and knowing when a score is wrong.Thu, 16 Jul 2026 00:00:00 GMThttps://seanmcquilling.com/blog/agentic-ai-field-notes/https://seanmcquilling.com/blog/agentic-ai-field-notes/A quick way to tell whether your agent setup is ready to grow or still held together by one-off fixes.Tue, 16 Jun 2026 00:00:00 GMThttps://seanmcquilling.com/blog/security-notes-for-local-agents/https://seanmcquilling.com/blog/security-notes-for-local-agents/A practical security review for agents that can read files, run commands, and use outside services.Mon, 15 Jun 2026 00:00:00 GMThttps://seanmcquilling.com/blog/pattern-library-for-tool-calling/https://seanmcquilling.com/blog/pattern-library-for-tool-calling/Four simple work patterns for agents that use tools, make changes, test the result, and recover from interruptions.Sun, 14 Jun 2026 00:00:00 GMT