{
  "updated": "2026-10-15",
  "scope": "Curated independent project decisions; no employer internals or personal account data.",
  "case_studies": [
    {
      "id": "case-mcpatch",
      "project": "MCPatch",
      "title": "Give agents useful access with explicit authority.",
      "problem": "An authenticated browser session gives an agent access to far more than a single task requires. The engineering problem is to expose useful actions while keeping permissions inspectable.",
      "constraints": "Work with existing sessions; bind actions to the intended origin; keep consequential actions subject to approval.",
      "decision": "Separate the Rust bridge from the TypeScript browser runtime. Expose named, typed capabilities with schema validation, permission ceilings, single-use approvals, and lifecycle revocation.",
      "result": "An experimental capability broker with explicit permission boundaries and a documented threat model. This is personal engineering work; production adoption and an independent security audit are not claimed.",
      "tradeoff": "Capability definitions and adapters require maintenance, but make authority narrower and easier to review than unrestricted browser control."
    },
    {
      "id": "case-kimi",
      "project": "Kimi Chart",
      "title": "Keep data, decisions, and order authority separate.",
      "problem": "A workflow joining market data, scheduled analysis, messaging, and order submission needs clear behavior when inputs are stale or services fail.",
      "constraints": "Self-hosted operation, asynchronous updates, freshness requirements, and human approval for paper-order execution.",
      "decision": "Use explicit service boundaries and immutable decision data. Validate freshness before acting, keep order authority with one writer, and separate analysis from human-approved paper orders.",
      "result": "A personal-use decision platform connecting data, validation, and approval workflows. It demonstrates integration and operational control; investment performance and commercial adoption are not claimed.",
      "tradeoff": "More explicit state and service boundaries add coordination work, while making retries and authority easier to reason about."
    }
  ]
}