https://t0ul.com/tags/architecture/Recent content in Architecture on t0ulHugoen-usTue, 29 Sep 2026 00:00:00 +0000https://t0ul.com/blog/make-it-idiomatic-the-repo-refactor/Tue, 29 Sep 2026 00:00:00 +0000https://t0ul.com/blog/make-it-idiomatic-the-repo-refactor/<p><em>Part of my <a href="https://t0ul.com/blog/the-plan/">AI Security Engineering</a> series, a local email-to-calendar agent I build, then attack, then harden. If you have not set up the lab yet, start with <a href="https://t0ul.com/blog/setting-up-the-lab/">Set up your lab</a>. The lessons are <a href="https://github.com/t0ul/ai-security-engineering">on GitHub</a>, and the agent itself lives at <a href="https://github.com/t0ul/emaildrop">t0ul/emaildrop</a>.</em></p> <h2 id="readable-is-a-security-property">Readable is a security property</h2> <p>Almost everything in this book has been a control. This post is the one that is not, and it is here on purpose, because the thing that keeps a system secure after the author moves on is not any single control, it is whether the next person can read the code well enough to not break one. A clever defense buried in a thousand-line file nobody wants to touch is a defense on borrowed time. So the last chapter before the finish is about craft: turning the accumulated pile into Go you would be glad to hand over. There is no attack to run, so this one is prose.</p>