Field notes

What I actually did, written up while it was still fresh. Agents, the edge, local ML, and the tools built to build things.

postmortem / 0012026.09.22
The version policy lost to a CVE
My rule is to run the latest stable minor that has been out three months. For Astro that points at 6.4.8, which carries an unpatched critical RCE. The rule and the security floor cannot both hold, so one of them gives.