Insights

Technical notes we write for ourselves and for clients. Each one names its sources and says where its conclusions stop applying.

Articles

  • GEO Guide

    What Generative Engine Optimization is, how it differs from SEO, and the nine methods a peer-reviewed study found actually move citation rates.

  • Reading the Threat Landscape

    Eight headline figures from the CrowdStrike 2026 Global Threat Report, how each was measured, and what that means for how far it generalises.

  • Post-Quantum Cryptography Migration

    Governance, CBOM inventory, risk assessment, crypto-agility and supply chain — mapped to the FSC's seven strategies, with the US, EU and Taiwan timelines and where each comes from.

  • Workspace AI: reading the ROI

    The method, sample size and vintage behind four widely quoted Workspace AI figures, set against independent research, and why self-reported time savings need objective verification.

  • LLMs.txt Explained

    What llms.txt is, what it expresses that robots.txt cannot, and an honest account of its status: a proposal in use, not a ratified standard.

  • What is MCP

    Host, client and server; why prompts, resources and tools differ by who decides rather than read versus write; and what the 2026-07-28 revision removed.

  • Prompt Injection Explained

    How prompt injection works, how it differs from jailbreaking, and the layered defences that actually reduce the risk.

  • OWASP LLM Top 10

    Each of the ten risks with its definition, real attack surface and defences — plus the 2025-to-2026 reordering, the four entries that widened, and how the ranking method changed.

  • Prompting Guide

    What to specify, what to leave open, and how to tell whether it worked. Covers role and task framing, step instructions, output formats, and designing agents.

  • A practical guide to building Claude Skills

    Turning an SOP or a piece of expert knowledge into a reusable automated workflow: folder structure, the YAML rules that decide whether it loads, testing, and release.

  • ADK Skill Patterns

    Tool Wrapper, Generator, Reviewer, Inversion and Pipeline — the five patterns from Google Cloud Tech, and what problem each one is actually solving.

  • An agent development workflow

    Chain the 25 skills in mattpocock/skills into one repeatable development flow: grill, spec, tickets, implement, code-review. Four worked scenarios, 31 known pitfalls, and a 14-day plan.

Open Source

TWSE MCP

An MCP server for the Taiwan Stock Exchange's open data — quotes, ETFs and 140+ public datasets — so AI applications can query it directly. We maintain it in the open.