Week of August 14–21, 2026: Google caps how many extensions one publisher can list in the Chrome Web Store, an essay argues web apps should let users generate their own sandboxed extensions, and...
Subscribe to keep up to date with my latest posts. Shorter pieces are also collected on the Notes page.
-
Note This Week in Extensibility: Chrome Web Store caps extensions per publisher, the blogosphere discusses LLM-generated user extensions, and YC startup Vendo launches on HN
-
Contact Center Fraud: highlights from my Cyber Crime Junkies episode
Highlights from my conversation with David Dean Mauro on Cyber Crime Junkies about contact center fraud, insider risk, AI agents, and locking down shadow AI.
-
Note This Week in Extensibility: Edge commits to removing Manifest V2, WebMCP adds Edge and Brave, Cloudflare previews a code-sandbox SDK
Week of August 7–14, 2026: Microsoft Edge commits to removing Manifest V2, WebMCP origin trials reach Microsoft Edge and Brave, and Cloudflare ships a 1.0 preview of the SDK for running customer...
-
Note Agentic Software Factories: Parallel agents diverge. Plan to converge.
Running coding agents in parallel is closer to a team of different developers than one developer multitasking, so plan a deliberate converge phase after the diverge phase.
-
Note This Week in Extensibility: six vendors standardize agent-plugin bundles, Mozilla stays neutral on WebMCP, Atlassian opens Rovo to Forge apps
Week of July 31 – August 7, 2026: six agent vendors publish a shared plugin-packaging standard, Mozilla files a neutral position on WebMCP that leaves the browser engines split, and Atlassian...
-
Note This Week in Extensibility: MCP ships its stateless spec with sandboxed app UIs, WebMCP starts tracking cross-engine support, WebExtensions weighs OAuth for MCP servers
Week of July 24–31, 2026: MCP ships its 2026-07-28 specification with a stateless core and first-class extensions for sandboxed app UIs and async tasks, WebMCP stands up a cross-engine...
-
Note This Week in Extensibility: Wasmtime enables GC and exceptions by default, WebMCP specs in-page agent APIs, the WebExtensions group commits to shipping spec text
Week of July 17–24, 2026: Wasmtime turns on WebAssembly GC and exceptions by default, WebMCP specifies how a user's in-page agent discovers and invokes a site's tools, and the W3C WebExtensions...
-
Note This Week in Extensibility: the Chrome Web Store bans two extension categories, Mozilla proposes a permission model for AI agents, Cloudflare runs customer code before signup
Week of July 10–17, 2026: the Chrome Web Store bans prediction-market and AI-guardrail-circumvention extensions and narrows what any extension may collect, Mozilla proposes a browser-mediated...
-
Note This Week in Extensibility: MCP's spec locks down its auth and skills, WebMCP gets conformance tests, WebAssembly components bind to real-world interfaces
Week of July 3–10, 2026: MCP's next spec locks down its client-auth and skill-distribution pieces before a July 28 launch, WebMCP gains a cross-vendor conformance suite, the WebAssembly Component...
-
Note Loop Engineering: always be compounding
Loop engineering for AI agents should raise the floor on each iteration by creating tools and correcting instructions.