Notes
Notes on detection and evidence.
What we are learning while building agents that have to answer for their work.
2026
- Sep 27 Engineering note What the leaderboard knew We rebuilt the winning recipe from a famous fraud competition on our own time split. Most of its lead came from averages that already include each card's later transactions, which a live system never has.
- Sep 26 Essay Fraud, intrusion and a failing pump are the same problem. Money laundering, account takeover, lateral movement and machine faults look like different industries. Underneath, they ask the same question of the data, which is why one engine can answer all of them.
- Sep 26 Engineering note We withdrew our best number. Here is the one that holds up. We found three ways our test set was leaking into the build, withdrew the result, fixed the protocol, then made the scoring stricter too. The number we quote now is lower, and it is the one worth quoting.
- Sep 26 Essay Writing detection rules is getting easy. Trusting them is the product. Every monitoring vendor will soon have an agent that writes rules. The hard part, and the part regulated teams pay for, is proving those rules work and keeping them from drifting.