August 28, 2026 · 6 min · mcp / security
The tools you audited are not the tools that run
MCP servers can change their own tool list after you approve them. Static review has a shelf life, and the fix is not a better review.
← Home
Writing
Notes from building the governed layer
Engineering notes on agent governance, MCP, and what we measure. Every number here carries its basis. Where we have not measured something, we say so instead of rounding it into a claim.
August 28, 2026 · 5 min · measurement / receipts
We asked one question two ways and published the logs
A governed run and an ungoverned run against the same production question. One returned the answer in 14.4 seconds. The other spent more and returned nothing.
August 28, 2026 · 5 min · design / approvals
The policy check takes 0.024ms. That was never the hard part.
Everyone benchmarks the guardrail. The expensive thing is the human, and pretending otherwise is how governance products end up unused.