.tip

Jun 14, 2026 · one of the small things

An on-call agent gets one action, then a human

The failure mode of an autonomous system is a chain of reasonable actions that compound. Restart did not help, so scale up, so roll back, and now three things changed. Let the agent do one thing per incident, announced, from a fixed list. If it did not resolve the alert, a person decides the next step.

ai-agentssre

Longer version: the post this came from.

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close