https://www.ammaradam.dev/https://www.ammaradam.dev/about/https://www.ammaradam.dev/notes/https://www.ammaradam.dev/posts/agent-identity-is-not-authorization/https://www.ammaradam.dev/posts/agent-success-is-not-a-200/https://www.ammaradam.dev/posts/checking-user-and-agent/https://www.ammaradam.dev/posts/first-users-shape-the-design/https://www.ammaradam.dev/posts/gateway-errors-that-help/https://www.ammaradam.dev/posts/hide-complexity-not-evidence/https://www.ammaradam.dev/posts/patterns-for-safe-tool-calls/https://www.ammaradam.dev/posts/standardise-the-right-things/https://www.ammaradam.dev/posts/time-to-first-production-call/https://www.ammaradam.dev/posts/tool-call-timeouts/https://www.ammaradam.dev/posts/what-not-to-expose/https://www.ammaradam.dev/posts/who-chooses-the-model/https://www.ammaradam.dev/projects/https://www.ammaradam.dev/themes/https://www.ammaradam.dev/themes/ai-agents/https://www.ammaradam.dev/themes/ai-platform-engineering/https://www.ammaradam.dev/themes/developer-experience/https://www.ammaradam.dev/themes/identity-security/https://www.ammaradam.dev/themes/observability/https://www.ammaradam.dev/themes/reliability/