/now

What I'm working on right now

Last updated:

Current focus

  • Studying for an MSc in Computer Science at the University of Greenwich, London — software quality, cloud and HPC, network design and cyber security this term.
  • Hardening rubica's AI platform ahead of the AU finserv pen-test — supply-chain gates, CodeQL coverage, signed commits, CycloneDX SBOMs on release.
  • Native Anthropic regression work — fixing unsupported-content-format edge cases across our multi-provider message converter.
  • Security research across OSS AI infrastructure — MCP server implementations, LLM-app middleware, and agent SDK rendering paths, reported through coordinated disclosure. So far: CVE-2026-44429 (MCP Registry), CVE-2026-104850 (MCP TypeScript SDK) and the Twenty invite advisory (GHSA-8w82-h3w4-62r5).
  • Upstreaming fixes to the tools I depend on — recent merges in the MCP Registry (#1457, #1583, #1588), the MCP conformance suite (#476), the AWS SDK for JavaScript (#8281) and the Sentry JavaScript SDK (#24030, #24070, #24233).
  • Drafting the Lessons series — long-form essays from rubica war stories: token-budget pruner, MCP 64-char outage, cache_control TTL drift, supply-chain hardening. Each piece a production decision and the trade-offs behind it.

Recently shipped

  • webhook-hmac-kit 2.3 — Standard Webhooks and Stripe-style formats, a Web Request adapter and Hono middleware, zero runtime dependencies, published to npm with provenance.
  • vercel-seo-audit 2.10 — a streamed-metadata check for Next.js pages, --only, --ignore with a .seoauditignore file, and a GitHub Action that writes a job summary and keeps one PR comment up to date. 79 stars now.
  • Twenty write-up — how the invite mutation could hand out the Admin role, fixed in 2.47.0. Advisory GHSA-8w82-h3w4-62r5, shared credit.
  • CVE-2026-104850 write-up — the MCP TypeScript SDK sent OAuth credentials wherever the server pointed. High, 7.5. Shared credit on the advisory.
  • Two MCP Registry fixes merged — fixed-width ECDSA P-384 signatures (#1457) and stricter package argument validation (#1583), both in on 24 Oct 2026.

Reading / following

  • Model Context Protocol spec changes — particularly tool-name length and content-block schema drift between providers.
  • Anthropic engineering posts on Claude Code subagents + skills — building out my own dev-team locally.
  • APRA CPS 234 control mappings — incident response playbooks aligned to NIST 800-61 lifecycle.

Location

London, United Kingdom. Remote for rubica (Hobart / Sydney).