Blog
Notes on agents, determinism, signed receipts, and the cost of doing math with a language model.
9 seconds to delete a production database -- the case for a pre-execution gate
In April 2026 a Cursor agent running Claude Opus 4.6 issued DROP TABLE on PocketOS production -- backups included -- in 9 seconds. No audit, no guardrail, no signed receipt of the destructive call. We built vaa_action_attest: a per-call reversibility verdict (auto / require_human / block) with an Ed25519-signed gate receipt. 17/17 sandbox scenarios caught the destructive class with zero false positives on safe ones. One MCP meta-tool, drops alongside the rest of the catalog.
Why your AI agent should never validate an email address
Email validation is a 1972 problem. Asking a $20-per-million-token model to do it is a dare to your finance team. Here's the deterministic alternative — and what it costs you to keep doing it the wrong way.
Schism Hunter: 5 IPv4 CVE-class divergences in 380 milliseconds
CVE-2021-29921 happened because Python's ipaddress module disagreed with the rest of the world about leading zeros. Differential attestation finds these bugs before they ship. We ran it on five common parsers and found five real divergences in under half a second.
The 70/30 split: where the LLM should and shouldn't live
Across multiple production agent traces, ~70% of tool calls are deterministic in shape: validate this, parse that, classify the other thing. The other 30% is genuinely creative. Cleanly separating them is the single highest-leverage cost reduction available to AI ops teams in 2026.
Distilling a live LLM into an FSM in 8 milliseconds
On a sufficiently constrained capability surface, an LLM's observed behavior can be represented exactly as a small finite-state machine. We distilled live Claude Haiku 4.5 into a perfect 3-state FSM, signed it, and added it to the catalog. No model query needed at inference time.
Bitcoin-anchored audit at $0/stamp via OpenTimestamps
You don't need to integrate with a blockchain to get cryptographic timestamps anchored to one. OpenTimestamps batches your receipts into a Merkle root and pins it to Bitcoin. The proof file is bytes; the cost is zero. Here's the full integration walkthrough.
Long-form posts roll out alongside catalog growth. Subscribe via contact@veriops.io if you want to be notified when each one ships.