Notes on building automation that touches money and personal data: what we got wrong, which controls turned out to matter, and the arguments we keep having about where a human belongs in the loop.
6 min read
Filtering a model's response is not privacy engineering. If the prompt contained a customer's access token, the token has already left your tenancy.
SentryFlow Engineering · Security architectureRead
8 min read
A queue that flags everything gets approved without being read. Our first approval design was technically correct and completely useless, and fixing it meant admitting the volume was the bug.
SentryFlow Product · ProductRead
6 min read
Not a dashboard. A specific record, for a specific action, on a specific date, with the person who authorised it — and a reason to believe the record was not written afterwards.
SentryFlow Trust and Compliance · Trust and complianceRead