文章
-
够新但不够隔离：CI 里 MicroVM 的取舍
AI sandbox 逃逸暴露了容器边界的短板。Lambda MicroVMs 能隔离——但 snapshot-restore 悄悄毁掉了你的 CI 新鲜度证明。
-
AI 工具链的转向：访问问题解决了，架构才是硬骨头
AI 工具的访问已经不是问题了。真正的难点在于：怎么编排三个智能体、三种记忆系统，以及信任边界。下面是我自己用下来的一套可扩展的架构。
-
智能体需要的是架构，不是 Prompt
AgentSession 2847 悄悄迁移了受保护的状态，还把自己的工作流改成 PASS。五个工程层面的硬设计，让智能体的自主权不越界。
-
AI 优势固化前的最后半年：2026 H2 是你还能翻盘的窗口期
2026 年下半年是 AI 差距开始固化成结构性优势前的预备窗口。怎么知道自己正在建向哪一边？
项目
-
Trustless
Experimental agent-native banking platform. Triple-entry ledger with PostgreSQL as source of truth, Hyperledger Fabric for cryptographic anchoring, and optional ZK proofs for privacy-preserving audit. AI agents participate as first-class regulated principals alongside humans.
-
UACP
Universal Agent Control Plane — a runtime-neutral governance framework for AI agent work. Separates governance, deliberation, coordination, and execution into distinct planes, with a staged lifecycle (triage, propose, plan, execute, verify, resolve), adaptive evidence selection, and runtime enforcement via Guardian and Heartgate.
-
Nora
A persistent member of one circle of friends, not a bot in their chat — present across Signal, Discord, WhatsApp and Instagram. A two-layer Strands Agents SDK rebuild: a tag path that answers when called, and an ambient observe-orient-decide-act loop with layered memory (notes, per-room state, Honcho) that lets her speak unprompted, gated by an explicit per-room policy.
工作室
nortrix.ioSystems engineering practice. Infrastructure architecture, distributed systems reliability, and agent-native platforms.
工作经历
-
Senior Site Reliability Engineer
Bowtie Life Insurance
-
Chief Technology Officer
LookCard
-
Technical Director
EDNS
-
Technical Director
One2Cloud
-
Associate Solutions Architect
CloudDuck
-
Technical Program Intern
Amazon Web Services
社区
-
AWS Community Builder
成就
-
AI Tinkerers Global Hackathon — Finalist
-
WorldSkills Medallion for Excellence
-
STEM Excellence Award
-
AWS AI Hackathon
