Writing
Written here first.
Current work on agent governance, MCP supply chains, and the tools we publish. Where a piece appears on another platform afterwards, this remains the version of record.
- Sentinel · 29 August 2026
Your scanner and npm may not be reading the same package
A tar archive can hold two entries at one path, and the tools that read one don't agree about which wins. An adversarial review found our own tool gave three different answers to that question — and why the fix was to refuse the input rather than pick a side.
- Sentinel · 17 August 2026
The package you approved isn’t the one running tomorrow
Why a routine MCP server release is the moment your agent’s behaviour changes without anyone deciding it should — what Sentinel records, the coverage figure we retired for being unreproducible, and the flaw an adversarial review found in our own parser.