Architecture Fluency

Playbook.Architectures & Artifacts.

The systems behind the product decisions: open-source repositories, enterprise APIs, spatial routing graphs, and kernel work, across fifteen years.

Start with a decision below, then follow it through an illustrative scenario. For the complete technical record, browse the systems library.

Operating Convictions

Tracing My Reasoning & Judgement

Positions I actually hold, and the decision each one produces when it meets a real situation. They are stated as branches rather than principles because that is how they get used: something arrives, and the call goes one way or the other.

  1. 01 / AI GovernanceTool interception has to be deterministic, not an LLM judging another LLM.
    When this comes up

    An agent asks to do something that moves money, mutates customer data, or touches production.

    Can the rule be stated as a rule?

    It canEnforce it in the policy kernel. Same input, same decision, on every runtime, every time.
    It can'tThen it needs judgement, and judgement means a named human approves it. Not a model.
    Why I hold it

    A model judging a model returns a probability, not a boundary. You cannot audit a probability, you cannot reproduce it, and you cannot tell a customer or a regulator what the system will do the next time the same request arrives.

    What it costs

    Deterministic rules are more work to write, and they only catch what you thought to anticipate. I would rather ship a boundary that holds plus a gap I can see than a judgement I cannot reproduce.

  2. 02 / Agent AutonomyI treat an unmonitored agent with write access like a junior contractor holding root production keys.
    When this comes up

    A team wants to give an agent write access to a production system.

    Is the action reversible, and is anyone watching?

    Reversible and observedLet it run. Autonomy should accelerate low-risk work.
    Irreversible or unobservedGate it behind a named approval and a tamper-evident record.
    Why I hold it

    Nobody hands a new contractor root keys because they are fast. The question was never competence or speed, it is blast radius and attribution. An agent changes neither — it just removes the person you would otherwise have asked.

    What it costs

    Gates add latency and teams feel it. That trade is real: some work runs slower so the expensive class of mistake stays impossible rather than merely unlikely.

    Where it shows up

    The agent governance work

  3. 03 / DeliveryIf engineering and product are arguing about delivery speed, 90% of the time discovery failed to define what done looks like.
    When this comes up

    Engineering and product are in conflict about pace, and it keeps coming back.

    Is done written down, and did both sides agree to it?

    It isn'tThe argument is not about speed. Send it back to discovery and define done.
    It isNow it is a real capacity or estimating problem, and worth having.
    Why I hold it

    Speed arguments are almost always proxy arguments. Two people who do not agree on what they are building will never agree on how long it takes to build it, and no amount of process fixes that downstream.

    What it costs

    Sending it back looks like losing a week and it is unpopular in the room. It is still cheaper than the month spent shipping the wrong thing at high velocity.

  4. 04 / Delivery FlowMost delivery delay is waiting, not working. So I measure the gaps between the work, not the effort inside it.
    When this comes up

    Delivery feels slow and the proposed fix is more capacity, more process, or more standups.

    Has anyone mapped where the time actually goes, intake through release?

    Nobody hasMap it before changing anything. Cycle time, work in progress, and throughput first, then the hand-offs and wait states between them.
    It's mappedFix the largest wait state. Not the loudest complaint, and not the team that looks slowest.
    Why I hold it

    Teams are visible and queues are not, so the blame lands on whoever is holding the work when someone looks. Mapping the value stream moves the argument off opinion: the wait between two steps is a number, and a number can be fixed. Almost every time, the delay is sitting in a hand-off nobody owns rather than in the hours anyone is putting in.

    What it costs

    Mapping is unglamorous and it takes a cycle to do honestly, and it usually indicts a hand-off that a senior person designed. Adding capacity is faster to announce and does nothing, which is why it stays popular.

  5. 05 / Building Product TeamsA product manager has to work on more than one spectrum at once: breadth and depth, tactical and strategic. AI widened that requirement rather than narrowing it.
    When this comes up

    Hiring a PM, or working out why a capable one is not landing in the role.

    Which ends are they strong at, and which does the role actually need?

    Anchored at one endPredictable failure mode: deep-only writes specs nobody asked for; broad-only coordinates without ever deciding.
    Can move along bothGive them real decision rights. This is the person who can be promoted.
    Why I hold it

    The job changes register several times a day — a schema question in the morning, a pricing call after lunch. Someone anchored at one end handles half of it well and quietly drops the other half. AI raised that bar instead of lowering it: the tactical output and the deep analysis are both cheap to generate now, so the scarce skill is knowing which question to ask and being able to tell whether the answer is right. A PM who only operates tactically is competing with a tool that is faster. A PM who only operates strategically cannot judge what the tool produced.

    What it costs

    It is a demanding bar and it narrows the pool. It also means telling someone plainly which end they are short on, which is a harder conversation than a rating.

  6. 06 / Strategic FocusA profitable tangent is still a tangent — and the profitable ones are the hardest to kill.
    When this comes up

    A line of business is making real money and has real customers, but it does not feed the thing that makes the core product hard to copy.

    Does this strengthen the moat, or only the P&L?

    Feeds the moatFund it properly. Half-funding a strategic line is how you lose it slowly.
    Only the P&LKill it, and take the revenue hit. The scarce resource was never the money, it was the team.
    Why I hold it

    Jungle Scout's defensibility was its data — quality, coverage, accuracy. Jungle Scout Market was a two-sided services business alongside it: we vetted freelancers on one side and Amazon sellers on the other, matched them for copywriting, photography, design, and translation, and took a commission. It worked. It reached roughly $1M. It also made the data no better, and it ran on the people who would otherwise have been making the data better.

    What it costs

    I did not start Jungle Scout Market — it launched in April 2018, before I joined — but I expanded it before I shut it down. I read the revenue as validation and put more people behind it, and it was another two quarters before I accepted that a business can be working and still be the wrong business. Shutting it down meant giving up $1M and telling both sides of a marketplace we had asked to trust us that we were leaving.

  7. 07 / Enterprise RetentionDescriptive data does not retain enterprise customers. They are paying for the decision, not the dashboard.
    When this comes up

    An analytics product has strong data, strong engagement, and enterprise accounts are churning anyway.

    Which of the three questions does it answer — what happened, why, or what to do next?

    Only what happenedIt is a report. Usage will look healthy and renewals will not. Fix the layer, not the funnel.
    What, why, and what nextThe data is now load-bearing in someone's weekly decision, and that is what makes it hard to rip out.
    Why I hold it

    Before the Downstream Impact acquisition, enterprise retention was the worst number in the business. The data was not the problem: it was the best marketplace data in its category and customers said so. It could tell a brand exactly what had happened on Amazon. It could not tell them why, or what to spend differently on Monday, and enterprise buyers do not renew six figures for a description of their own quarter. Engagement hid it — people used it constantly and left anyway.

    What it costs

    I read strong usage and strong data quality as product-market fit, and spent too long improving the layer we were already good at — more coverage, more accuracy, faster refresh — when the actual gap was that we answered one question out of three. By the time that was clear, it was not something we could build quickly from where we stood. It took acquiring Downstream Impact to get the advertising data the why needed and the levers to act on it. Retention recovered on the other side of that. Buying the missing half costs more than seeing it earlier.

    Where it shows up

    What customers said after

Decisions in action

Follow the decision through the system.

Choose a scenario to explore the business consequence and the technical steps behind it.

Business consequence

What the decision changes for cost, risk, and customers.

Technical implementation

Policy kernels, model checks, data pipelines, and mobile OS builds.

Agent GovernanceStrict Policy Enforced

Policy Operations & Action Control

Governing AI agent tool calls in real time. The proxy intercepts actions before they hit APIs or databases, checks workspace and security rules in a fast Rust engine (<1ms), records a tamper-evident audit log, and requests human approval for high-stakes operations.

POLICY DECISION / FINANCIAL MUTATION · SPCTRE CORE

Runtime Authority & Permission Boundary

Strict Policy Gate
Requested Action

Agent issues a $1,450 customer refund via external payment API.

Policy

Refunds above $500 require named human approval.

System Outcome

Action paused. Approval request and tamper-evident audit record created.

Executive Reason

Autonomy should accelerate low-risk work, not silently expand financial authority.

Policy Execution Flow
Agent requestPolicy evaluationApproval requiredAudit ledger
Why it mattersPrevents unauthorized actions by verifying agent tool calls before external APIs or databases are modified.
What it producesSub-millisecond evaluation in local Rust benchmarks; same result on every runtime; SHA-256 hash-chained audit trail
InfrastructureRust Policy Kernel, Go Worker (C ABI), Next.js 16, Postgres RLS, MCP
Illustrative execution trace
Simulated data
Business consequenceReduces the risk of unauthorized actions by checking tool calls before runtime mutations occur.
This trace illustrates the scenario using simulated data.
Choose “Run this scenario” to follow the decision step by step.
Ready.

The full systems record

Explore AI and data systems, commercial products, and open-source infrastructure in three themes.

Browse the systems library →

Full-Time Roles

Discuss a full-time product leadership role.

Where commercial accountability and technical judgment must work together.