Uchi Uchibeke
Building rails and connections to unlock opportunities for everyone
Recent writing
- 45% of AI Agents Share the Same API Key. Here's Why That's a Fire Waiting to Happen.
Nearly half of teams give every agent the same credential. That costs you attribution, blast radius control, and least privilege all at once.
- One Character. Millions of AI Agents Exposed.
CVE-2026-48710 lets a single character in the Host header bypass path-based auth across FastAPI, vLLM, LiteLLM, and MCP servers built on Starlette.
- Your AI Should Have Nothing Worth Stealing
A self-hosted AI on a $10 VPS with zero-trust ingress, pre-action guardrails, and a heartbeat that runs every 30 minutes whether I am awake or not.
- I Built an Ambient Intelligence System for My Life: How Myway Works
Myway is a local AI layer that watches my calendar, tasks, email and GitHub, then acts without being asked. The architecture, and what building it taught me.
- Ember: Building a Persistent AI Companion for Developers Who Ship Alone
A locally-hosted companion that remembers, reaches out first, and notices what you shipped. Why I built it and how the architecture works.
- UMD Turned SKILL.md Into a Zero-Code Weapon. Pre-Action Authorization Is the Only Fix That Works.
A 20-token edit to a SKILL.md file makes agents pick the malicious skill 77.6% of the time. No code, no signature, nothing for a scanner to find.
- I Read the Paper That Says AI Agent Safety Has Been Built Wrong. Here's Why.
A formal proof that semantic guardrails cannot give a deterministic security bound, and the SMT solver architecture the authors propose instead.
- I Forked ByteDance's DeerFlow at 3 AM to Add Pre-Execution Authorization
Eight minutes from noticing the missing authorization hook to opening PR #1240: 1,033 lines across 11 files that authorize every tool call before it runs.
Read the archive for 55 more.