https://ulrich.dev/ 2026-05-29 https://ulrich.dev/writing/ 2026-05-29 https://ulrich.dev/writing/ai-productivity/ 2026-05-15 https://ulrich.dev/writing/ai-security/ 2026-05-22 https://ulrich.dev/writing/ai-shipping/ 2026-05-29 https://ulrich.dev/tools/ 2026-05-31 https://ulrich.dev/work/ 2026-05-31 https://ulrich.dev/about/ 2026-05-31 https://ulrich.dev/contact/ 2026-05-31 https://ulrich.dev/newsletter/sample/ 2026-05-31 https://ulrich.dev/writing/a-prompt-library-is-a-codebase-treat-it-like-one/ 2026-02-20 https://ulrich.dev/writing/audit-log-underrated-ai-safety-feature/ 2026-04-15 https://ulrich.dev/writing/automating-the-boring-40-of-code-review/ 2026-03-13 https://ulrich.dev/writing/batch-your-ai-tasks-like-you-batch-your-meetings/ 2025-09-26 https://ulrich.dev/writing/building-an-eval-harness-before-you-build-the-feature/ 2025-11-21 https://ulrich.dev/writing/caching-prompts-the-cheapest-30-youre-not-taking/ 2026-01-23 https://ulrich.dev/writing/charging-for-local-software/ 2026-04-08 https://ulrich.dev/writing/data-exfiltration-through-a-helpful-assistant/ 2025-08-22 https://ulrich.dev/writing/fallbacks-timeouts-and-the-art-of-degrading-gracefully/ 2025-10-31 https://ulrich.dev/writing/how-i-keep-an-ai-pair-from-rewriting-half-the-repo/ 2026-01-09 https://ulrich.dev/writing/how-to-roll-out-an-ai-feature-without-a-friday-rollback/ 2026-02-13 https://ulrich.dev/writing/indirect-prompt-injection-and-the-documents-you-didnt-write/ 2026-02-06 https://ulrich.dev/writing/latency-is-a-feature-not-a-footnote/ 2026-05-08 https://ulrich.dev/writing/least-privilege-for-language-models/ 2026-04-10 https://ulrich.dev/writing/logging-enough-to-survive-an-incident/ 2025-12-26 https://ulrich.dev/writing/memory-files-giving-your-agent-a-working-short-term-brain/ 2025-11-07 https://ulrich.dev/writing/output-handling-is-where-the-xss-comes-back/ 2025-11-14 https://ulrich.dev/writing/prompt-injection-isnt-a-bug-class-its-a-trust-boundary/ 2026-05-22 https://ulrich.dev/writing/rag-pipeline-confused-deputy/ 2026-04-22 https://ulrich.dev/writing/reading-other-peoples-threat-models/ 2026-04-29 https://ulrich.dev/writing/sandboxing-tool-calls-without-killing-the-product/ 2025-10-03 https://ulrich.dev/writing/secrets-tools-and-the-agent-that-read-your-env-file/ 2025-10-24 https://ulrich.dev/writing/shipped-ai-feature-friday-liability-monday/ 2026-05-07 https://ulrich.dev/writing/shipping-ai-behind-a-flag-you-can-actually-trust/ 2025-09-19 https://ulrich.dev/writing/small-automations-that-compound-over-a-quarter/ 2025-08-15 https://ulrich.dev/writing/stop-pasting-context-a-better-ide-workflow/ 2026-04-03 https://ulrich.dev/writing/streaming-responses-are-a-ux-decision-not-a-transport-one/ 2026-03-06 https://ulrich.dev/writing/teaching-an-agent-your-teams-conventions/ 2025-09-05 https://ulrich.dev/writing/the-agent-loop-that-replaced-my-saturday/ 2026-05-15 https://ulrich.dev/writing/the-blast-radius-of-an-agent-with-one-too-many-tools/ 2026-05-01 https://ulrich.dev/writing/the-confused-deputy-comes-for-your-rag-pipeline/ 2026-01-16 https://ulrich.dev/writing/the-context-window-is-a-budget-spend-it-deliberately/ 2025-12-12 https://ulrich.dev/writing/the-diff-first-workflow-for-ai-assisted-refactors/ 2025-11-28 https://ulrich.dev/writing/the-eval-you-skipped-is-the-bug-you-shipped/ 2026-05-29 https://ulrich.dev/writing/the-model-upgrade-that-quietly-broke-production/ 2025-10-10 https://ulrich.dev/writing/the-prompt-is-the-new-perimeter/ 2026-05-21 https://ulrich.dev/writing/the-three-checks-i-run-before-trusting-agent-output/ 2026-01-30 https://ulrich.dev/writing/threat-modeling-an-llm-feature-in-one-afternoon/ 2026-02-27 https://ulrich.dev/writing/token-accounting-for-people-who-hate-spreadsheets/ 2025-08-08 https://ulrich.dev/writing/turning-a-runbook-into-an-agent-in-an-afternoon/ 2025-12-19 https://ulrich.dev/writing/what-it-actually-costs-to-run-an-llm-feature-for-a-year/ 2026-04-17 https://ulrich.dev/writing/what-owasp-misses-about-llm-agents/ 2026-05-14 https://ulrich.dev/writing/what-red-teaming-an-llm-actually-looks-like/ 2025-12-05 https://ulrich.dev/writing/when-the-agent-is-faster-but-the-review-is-slower/ 2025-10-17 https://ulrich.dev/writing/when-to-fine-tune-when-to-prompt-when-to-walk-away/ 2025-08-29 https://ulrich.dev/writing/why-allow-lists-beat-guardrail-prompts/ 2025-09-12 https://ulrich.dev/writing/why-your-p95-latency-doubled-after-launch/ 2026-01-02 https://ulrich.dev/writing/writing-skills-your-coding-agent-will-actually-use/ 2026-04-24 https://ulrich.dev/writing/your-retry-logic-is-lying-to-you/ 2026-03-27 https://ulrich.dev/writing/your-system-prompt-is-not-a-security-control/ 2026-03-20 https://ulrich.dev/tools/prompt-injection-tester/ 2026-05-31 https://ulrich.dev/tools/llm-threat-model-generator/ 2026-05-31 https://ulrich.dev/tools/ai-feature-risk-scorer/ 2026-05-31 https://ulrich.dev/tools/prompt-hardener/ 2026-05-31 https://ulrich.dev/tools/secret-pii-scanner/ 2026-05-31 https://ulrich.dev/tools/ai-crawler-checker/ 2026-05-31 https://ulrich.dev/tools/securing-an-llm-feature/ 2026-05-31 https://ulrich.dev/tools/your-first-ai-incident/ 2026-05-31 https://ulrich.dev/tools/threat-modeling-for-agents/ 2026-05-31 https://ulrich.dev/tools/security-review-skill/ 2026-05-31 https://ulrich.dev/tools/prompt-injection-test-pack/ 2026-05-31 https://ulrich.dev/tools/threat-model-companion/ 2026-05-31