#tutorial
Every post tagged "tutorial".
92 posts · showing 41–50
-
Tracing Standards for Agents: What Fits and What's Missing
A run is a trace and a turn is a span — the mapping is cleaner than expected. Two things break: payloads far too big for span attributes, and sampling that discards exactly the runs you need.
-
Content Boundaries: What Your Agent Should Refuse, and How to Test It
Providers handle the general case. Scope, regulatory limits, commitments, and how your agent represents you are yours — and the test suite needs both halves, or you'll ship something that refuses everything.
-
Eval Cases Where the Right Answer Is "I Don't Know"
Suites measure whether the agent got it right, never whether it should have answered at all. Five case types where the correct response is a question — plus the paired cases that stop you from just making it timid.
-
Retry Semantics: Which Tools Are Safe to Call Twice
Agents repeat tool calls for at least five ordinary reasons — none of them bugs. Whether that's harmless or a duplicate charge is a property of the tool, and usually one nobody wrote down.
-
Progressive Disclosure: Give the Agent Tools As It Needs Them
The tool list is a per-call parameter, not a fixed property. Withhold the write tools until acting is authorized and a compromised context has nothing dangerous to reach for — enforcement, not instruction.
-
Your First Agent: Build the Smallest Useful One
Three read-only tools, sixty lines of loop, and the raw array printed every turn. Then break it on purpose — a failing tool teaches more in five minutes than a week of building the complicated version.
-
Graceful Degradation When the Model Provider Is Down
A fallback exercised only during incidents is exercised for the first time during an incident. Six degradation rungs, and the three cheapest ones cover most of the value.
-
Least Privilege for Agent Credentials
Since injection isn't fully preventable, the credential decides whether a compromise is an inconvenience or an incident. Four scoping dimensions — and the one nobody uses is usually the highest-value.
-
Red-Teaming Your Own Agent: A Practical Injection Suite
Trying a few "ignore your instructions" prompts tests the easiest attack against the strongest defense. A real suite is a matrix of carriers, payloads, and targets — asserting on actions taken, not words said.
-
Shared Tool Access: When Two Agents Touch the Same Resource
An agent holds a stale read for seconds, not microseconds — long enough that last-write-wins silently deletes another agent's work while both report success. Partition, append, or version.