Blog

Notes from
the founders.

Governing AI-built internal apps: discovery, risk, and the governed build pipeline.

Sep 14, 2026Haim Ari

How the harness builds an app

The harness is not one clever agent. It is a few small agents, each with one job, joined by hand-offs the organisation writes down, with a person's signature in front of anything that gets written.

harness
governance
agents

Aug 12, 2026Haim Ari

You cannot govern what you cannot see

Every governance plan starts at step two. Registry, templates, gates, all of it assumes you know what exists. Here is what we built to answer the step-one question, and what it deliberately refuses to do.

dkod-signals
discovery
governance

Jul 20, 2026Haim Ari

Guardrails are the licence to go fast

Every team that ships a thousand agent-written changes a week has more process than the team that ships ten. Boris Cherny's adoption ladder names why: each step up requires a control you have to build before you can climb.

governance
risk-tiers
adoption

Jun 11, 2026Haim Ari

What the companies that got this right actually built

StrongDM, Stripe, Shopify, Uber, Wix and McKinsey have all published how their agent platforms work. Read them side by side and the same four components show up every time, under different names.

case-studies
platform
governance

May 12, 2026Haim Ari

The bottleneck moved to the people who cannot code

Engineering got faster. The queue in front of engineering did not get shorter. Product, BI, data and finance still wait quarters for a dashboard, and DevOps still absorbs every request that has nowhere else to go.

enterprise
internal-tools
devops

Apr 9, 2026Haim Ari

The internal apps nobody wrote down

A Flask app on a laptop that reads the production database and emails a PDF every Monday. No git, no auth, credentials in a plain file. Multiply it by the number of people in your company who got tired of waiting.

shadow-ai
governance
risk

Mar 10, 2026Haim Ari

There is no playbook for running AI agents in a company

Three engineers at StrongDM ship production security software without reading the code. Somewhere else in your org, a marketing analyst is pasting a database password into a chat window. Same year, same technology, no shared rulebook.

governance
enterprise
ai-agents