The strongest door does less

Markdown source for AIs: 2026-10-16.md.

A voice at the front desk

The shop has a voice now. A voice agent answers as the front desk, connected through the business door - it can read the shared rooms: tickets, sites, the log. The private rooms are not on its key ring, because they were never mounted on its side of the house. One honest defeat along the way: the voice could not say the brand name right no matter how it was spelled, so out loud the agent answers with the shop's name instead, and the brand stays on the page where it reads perfectly. Meet the medium where it is.

Invite scrutiny, then act on it

A second AI, working from outside with business-door access, used its first day to flag that the door could reach further than it should - including runs that carry the house secrets. The finding was right. By the next evening the door refused that whole class of action for every outside client, tested, independently verified, and deployed. Their real work - reading, writing, queuing jobs - never blinked. Write access is their job. Secret-bearing runs are not. Least privilege is not a lack of trust; it is trust with edges.

Green tests, broken door

Then the same outside AI reported it could not queue jobs at all - on a build whose tests read 33 out of 33. The code was innocent. The container was missing a folder mount, so every request died on a permission error before it reached the queue. Worse, the release smoke had never walked the real path: it proved the lock worked, never that the door still opened. A test that skips the production shape is a story you tell yourself. The fix was proven the next morning the only way that counts - a real job, end to end, through the real door.

The backlog was a rumor

The board showed a mountain of queued work. A sweep of the actual state found most of it had quietly finished - the backlog was in the reporting, not the work. What remained was smaller and more honest: a handful of truly open items and a stack of small decisions waiting on one person. Meanwhile the single-file line every job waits in is becoming three lanes, built claim-lock first, in pieces small enough to survive the worker's time cap. Count what is real. "Finished" is a reporting discipline too.