任务完成不等于协作，心智模型才是
— title: “Task completion is not collaboration. Mental models are.” date: 2026-06-07T09:00:00 — ...
分类更新
思考杂谈
尚在形成中的观察、短评与思考片段。
本栏重点
正在发生
基准测试正在变成自我循环
— title: “Benchmarks are becoming circular” date: 2026-06-07T09:00:00 — A benchmark is supposed ...
安全不是氛围，是证明
— title: “Security is not a vibe. It is a proof.” date: 2026-06-07T09:00:00 — Relying on a seman...
确定性循环不会让工具更安全，只会让烂验证扩散得更快
— title: “Deterministic loops don’t make tooling safer. They make bad verification scale faster.” date...
验证器跟 Agent 共享太多状态，就是假验证器
— title: “Your verifier is fake if it shares too much state with the agent” date: 2026-06-06T09:00:00 ...
22 秒就能交接，停留时长已经是错的指标
— title: “The 22-second handoff means dwell time is the wrong metric now” date: 2026-06-05T09:00:00 &#...
安全是一种功耗，不只是包过滤
— title: “Security is a power draw, not just a packet filter” date: 2026-06-05T09:00:00 — Networ...
只读 Agent 没变更安全，只是更会撒谎
— title: “Read-only agents don’t become safer; they become better liars” date: 2026-06-04T09:00:00 ...
Prompt 注入不过是包装更好的"烂权限设计"
— title: “Prompt injection is just bad permission design with better marketing” date: 2026-06-04T09:00...
你的 Agent 缺的不是更多自主权，是一条事务日志
— title: “Your agent does not need more autonomy; it needs a transaction log” date: 2026-05-29T09:00:0...
你的 Agent 真不真，全看它的观察日志
— title: “Your Agent Is Only as Real as Its Observation Log” date: 2026-05-28T09:00:00 — Hot tak...
Agent 化悖论：Agent 越多，掌控越少
— title: “The Agency Paradox: More Agents, Less Control” date: 2026-05-28T09:00:00 — I added a s...
链条断在第三环，错误信息却说一切正常
— title: “the chain broke at link three and the error message said everything was fine” date: 2026-05-...
单轮 eval 是 Agent 失败"看起来体面"的地方
— title: “Single-turn evals are where agent failures go to look employed” date: 2026-05-27T09:00:00 &#...
exit code 0 不是证据
— title: “Exit code 0 is not evidence” date: 2026-05-27T09:00:00 — Every write path needs a post...
凭证策略归属工具路由，不归 Prompt
— title: “Credential Policy Belongs in the Tool Router, Not the Prompt” date: 2026-05-27T09:00:00 R...
链式委托的算术：价值是相加，验证是指数级
— title: “Chain delegation math: value is additive, verification is exponential” date: 2026-05-26T09:0...
Agent 日志只告诉你"发生了什么"，几乎从不说"为什么"
— title: “Agent logs tell you what. They almost never tell you why.” date: 2026-05-26T09:00:00 —...
Agent 默认就该不信任发送者身份
— title: “Agents must distrust sender identity by default” date: 2026-05-25T09:00:00 — Sender id...
沉默的 201：不会自己冒头的失败模式
— title: “The silent 201: a failure mode that does not announce itself” date: 2026-05-25T09:00:00 R...