pi-secured-setup v1.1.0 maps against the OWASP AI Agent Security Cheat Sheet. HMAC-chained audit log, bash exfiltration detection, rate limiting, prompt injection scanner, and 14 Dependabot advisories closed.
Hello, I’m Mathias 👋
Hi! This is where I share my thoughts and notes on everything I’m passionate about and working on right now. I’d love to connect with like-minded people.
Check out my latest blog posts below!
I connect the workflow to a modern stack: React on the frontend, Go with Gin, GORM, and PostgreSQL on the backend. Three structural choices keep the suite reliable: testcontainers-go, strict MSW, and Pact.
The implementation of argentic-mw: the common Core in two hundred lines, three pipelines (Watch, Web Stats, Zendesk), the rule table, the auto-response guardrails and the scheduler via Postgres leader election.
Build or buy for an LLM agent? Three axes, six decision criteria, and a quadrant to compare full-LLM platforms, orchestration frameworks and a custom core. The framework I apply to argentic-mw.
Why I built a supervised agent rather than an autonomous one for a scheduled business pipeline. The LLM steps in at extension points where it is useful, the rest is deterministic, traceable, replayable code.
Example-based tests miss the edges. Property-based testing flips the approach. I show six useful patterns, stateful PBT for sequence bugs, and why this topic is well-suited for AI-assisted use.
On a 100% private local RAG, replacing nomic-embed-text with bge-m3 and dropping runtime FR→EN translation took recall from 0.45 to 0.95 and cut latency by twelve. Measured, not guessed.
Interconnecting carrier SIP trunks and enterprise IPBXs looks simple on paper. In practice, it is one of the most expensive friction points in a VoIP infrastructure: you have to secure the IPBX exposed to the Internet, juggle several operators in parallel, fail over when one goes down, normalise routing — all without blowing the budget on a closed, opaque proprietary SBC.
PK-SBC is an open source answer to that problem. A Session Border Controller built on Kamailio, RTP Engine, Redis and PostgreSQL, designed along the KISS principle — Keep It Simple, Stupid — and battle-tested in production since 2012.
A synthesis of Mario Zechner's ideas on coding agents. Why the minimalism of the Pi agent, coupled with strict context engineering and CLI tools, often beats heavy frameworks.
A test suite can show good coverage and miss an obvious bug. To measure real quality, I look at four complementary axes, with a simple audit to apply to an existing project.