GreyScript AI

Notes from building AI systems in production

Practical writing on agents, MCP, RAG, mobile AI, and the engineering decisions that separate a working demo from a system that survives real usage.

No posts match those filters.
What is A2UI? Google's agent-to-user interface protocol, explained for 1.0
How A2UI lets an AI agent send interactive UI as JSON that your app draws natively, what changed in 1.0, and how it relates to AG-UI and MCP Apps.
→
Project Glasswing CVEs: what Anthropic's disclosure numbers actually show
What Project Glasswing has found, disclosed, patched and turned into CVEs, from Anthropic's own dashboard, why trackers count differently, and what to do.
→
Zero data retention for AI APIs: what it covers and what it does not
What zero data retention means at OpenAI, Anthropic and Google Cloud, which API features step outside it, what is still kept, and what to check with an AI vendor.
→
Claude Code managed settings: how a company enforces policy
How companies set Claude Code policy with managed settings: delivery options, precedence, keys that lock permissions, logins and MCP, and what they cannot enforce.
→
Claude Code settings.local.json: permissions, git and keeping secrets out
Where Claude Code saves "don't ask again" rules, when settings.local.json is kept out of git, how keys leak into it, and what to do if one was committed.
→
How to sandbox an AI agent, and what a sandbox does not cover
What sandboxing an AI agent means: filesystem and network limits, container vs microVM isolation, how Claude Code and Codex do it, and a checklist.
→
MCP security: best practices and a checklist
How to secure an MCP deployment: what the MCP spec requires, the OWASP MCP Top 10 risks, and a practical checklist for servers, clients and tools.
→
PHP2Shell in 3D: watch the PHP flaw happen, step by step
An interactive 3D animation that shows how the two PHP2Shell flaws work, scene by scene, in plain English, with no programming knowledge needed.
→
What is PHP2Shell? The critical PHP flaw, explained
PHP2Shell is two critical flaws in PHP, rated 9.2, that can let strangers run code on a web server. What it is, who is affected and how worried to be, with diagrams.
→
How PHP2Shell works: the two PHP bugs, step by step
A technical walkthrough of CVE-2026-109618 and CVE-2026-109619: longjmp out-of-memory corruption, stale worker state, why mod_php is the confirmed case, and how the fix works.
→
How PHP2Shell was found: AI-assisted research, a leak and a rushed release
Who found the PHP2Shell flaws, what the AI did and what nobody has published, how the disclosure was coordinated, and what the 20 October leak shows.
→
PHP2Shell patch guide: how to check, fix and protect your PHP servers
Step-by-step PHP2Shell response: check exposure, patch to 8.5.12, 8.4.27, 8.3.36 or 8.2.35, the right stopgaps for each CVE, what to look for in logs, and what to rotate.
→
AI API pricing in November 2026: Claude, GPT-6 and Gemini compared
Claude, GPT-6 and Gemini API prices read from each provider's own pricing page on 12 November 2026, including Claude Fable 5.2 and Gemini 4 Argon, with a worked monthly cost.
→
SEO, AEO and GEO in 2026: a practical guide
The three layers in one paragraph each, three popular claims checked against the vendors' own documentation, and a reading order for all of our SEO, AEO and GEO posts.
→
How to measure AI answer engine citations
How to check whether ChatGPT, Perplexity, or Google's AI features actually cite your site: what Search Console now shows, log analysis, and what it can't tell you.
→
3 schema myths for AEO, checked against Google's own docs
Product schema, sameAs for AI trust, and a special AI schema type: checked against Google, and none of the three holds up.
→
Does anyone actually read llms.txt in 2026?
We checked OpenAI, Anthropic, Perplexity and Google's own crawler documentation for a statement that any of them reads llms.txt. None makes one, and Google has said directly that none of them do.
→
SEO in 2026: what changed, where AI actually helps, and the free tools to use
What AI Overviews and AI Mode actually changed about search, where AI genuinely helps with SEO work, and a practical walkthrough of which free tools help with which part.
→
AI crawlers and robots.txt, explained
What AI crawlers like GPTBot and ClaudeBot actually do, the difference between training, search-index and on-demand crawlers, and how to control them with robots.txt.
→
Answer-first content for AI search, explained
What answer-first content means, why AI answer engines favor it, and how to structure a page so the direct answer appears in the opening lines.
→
SERP snippets and AI answer previews, explained
What a SERP snippet is, why title and meta description length matter, and how the same fields can appear in an AI answer engine's citation card.
→
RAG chunking strategies, explained
What chunking is in a RAG pipeline, why chunk size and overlap affect retrieval quality, and how naive fixed-size chunking compares to structure-aware chunking.
→
Word and character counting for content that ranks
How word count, reading time and keyword density fit into checking a page before you publish it, and what they can and cannot tell you.
→
JSON formatter and validator: a practical guide
How to use a JSON formatter to debug an API response or a language model's JSON output, and the most common reasons JSON fails to parse.
→
Text diff checker: a practical guide
How to use a text diff checker to compare two versions of a prompt or a document, and when word mode is more useful than line mode.
→
URL and Base64 encoding, explained
What URL encoding and Base64 encoding actually do, when to use each one, and how to debug a webhook payload or an API auth header that will not decode.
→
Regex tester: a practical guide
How to use a regex tester to validate form input or extract structured data from text, and what the common JavaScript regex flags actually do.
→
AI agent security review: prompt injection, tool misuse, and data exposure, explained
What an AI agent security review actually checks, why prompt injection and tool misuse are different from ordinary bugs, and how a review fits into a build.
→
HIPAA-aligned data handling for AI products, explained
What HIPAA actually requires, why business associate agreements matter for AI vendors, and what to check before PHI reaches a model API or a log.
→
CCPA and US state privacy laws for AI products, explained
What the CCPA requires, the 2026 automated decision-making rules taking effect, and what changes for an AI product handling California consumer data.
→
SOC 2-ready logging and access control for AI agents, explained
What SOC 2 actually attests, the five Trust Services Criteria, and what logging and access control concretely mean for an AI agent that calls tools.
→
The NIST AI Risk Management Framework, explained
What the NIST AI RMF is, the four functions (Govern, Map, Measure, Manage) explained with examples, and the Generative AI Profile, NIST AI 600-1.
→
UK GDPR for AI products, explained
What UK GDPR actually requires, the 2026 rewrite of the automated decision-making rules, and what changes when the thing processing personal data is an AI agent.
→
GDPR for AI products, explained
What GDPR actually requires, why a data processing agreement matters for AI vendors, and what changes when personal data reaches a model API, a log, or training data.
→
The EU AI Act, explained
The EU AI Act's risk tiers, what high-risk compliance actually means, and the confirmed 2027/2028 deferred deadlines from the Digital Omnibus on AI.
→
The Australia Privacy Act and APPs for AI products, explained
What the Privacy Act 1988 and the Australian Privacy Principles require, and the 10 December 2026 automated decision-making transparency reform for AI products.
→
How to convert PDF and Word files to Markdown for RAG and AI
Converting PDFs and Word documents to Markdown before indexing them keeps headings, lists and tables and drops layout noise. A step-by-step guide, with a free converter.
→
What is llms.txt, and should you create one?
llms.txt is a proposed Markdown file that points AI models to a site's most useful pages. What the format is, what Google says about it, and when it is worth adding.
→
JSON-LD schema examples for FAQ, Article, Organization and HowTo
Copy-ready JSON-LD examples for Article, Organization, FAQPage, HowTo and BreadcrumbList, with what Google still shows for each in 2026 and how to validate them.
→
How to convert Markdown to Word, PDF or HTML
Three reliable ways to turn Markdown, including AI chat answers, into a Word document, PDF or HTML page, and how to fix the tables, lists and line breaks that go wrong.
→
What is AI alignment, and why is it a major safety challenge?
AI alignment is the challenge of building systems that actually do what people intend, not just what's technically specified. Why it's genuinely hard.
→
How do token limits affect the performance of large language models?
Fitting within a model's token limit doesn't guarantee good performance. Why context quality matters more than volume.
→
How do you fine-tune a pre-trained AI model on custom data?
Fine-tuning adjusts a pre-trained model's weights on a specific dataset. The actual process, what it's good for, and where it's the wrong tool.
→
How can AI be used to improve cybersecurity and detect threats?
AI genuinely helps with anomaly detection and alert triage, but attackers use AI too, and AI systems themselves are a new attack surface.
→
What is data labeling, and why is it crucial for AI training?
Data labeling is the foundation of supervised learning, and label quality determines model quality more than any modeling technique.
→
How do I integrate AI APIs into my existing software application?
Integrating an AI API is more than a new endpoint call. The real engineering work: output handling, error handling, and cost monitoring.
→
What are the legal regulations and laws governing AI worldwide?
AI regulation is genuinely fragmented and fast-moving across jurisdictions. The general shape of the different approaches.
→
How can AI optimize supply chain and inventory management?
Supply chain AI covers several genuinely different problems: demand forecasting, route optimization, anomaly detection, and document processing.
→
What is reinforcement learning, and how is it used in robotics?
Reinforcement learning trains a system through trial, action, and feedback rather than labeled examples. Why that fits robotics particularly well.
→
How does computer vision work in facial recognition systems?
Facial recognition carries real, documented accuracy and bias considerations. How it actually works, and why context and consent matter enormously.
→
What is the environmental impact and energy cost of training AI?
Training and running AI models consumes real energy and water, though precise, comparable figures are genuinely hard to pin down.
→
How do insurance companies use AI to calculate risk and claims?
Insurance AI sits at the intersection of real business value and high regulatory stakes. How it's actually used, responsibly.
→
What are the privacy concerns regarding AI data scraping?
AI training data scraped from the public web raises genuine privacy concerns distinct from copyright. Why "it was public" doesn't resolve the question.
→
How can AI help in data analysis and predictive modeling?
AI speeds up exploratory analysis and enables predictive modeling, but data quality and real validation still determine whether results are trustworthy.
→
What programming languages are best for AI development besides Python?
Python dominates model development, but a real production AI system is usually a composition of languages. Where JavaScript, Rust, Go, and SQL fit.
→
What is the difference between narrow AI and strong AI?
Every AI system in existence today, including capable language models, is narrow AI. Strong AI remains hypothetical. The real, substantive distinction.
→
What is Natural Language Processing (NLP), and what are its real-world uses?
NLP is a broader field than large language models, covering classification, entity recognition, search, translation, and generation.
→
How can small businesses implement AI to cut costs?
Small businesses don't need enterprise AI infrastructure, they need a few well-scoped, genuinely useful applications. Where cost savings actually show up.
→
What are the limitations and biases of current AI systems?
AI's limitations are specific and designable-around, not just a vague disclaimer. What current AI systems actually struggle with.
→
What is the role of neural networks in deep learning?
A neural network is layers of simple, weighted units that together learn complex patterns. How the basic mechanism actually works.
→
How is AI changing the future of digital marketing and SEO?
AI has changed both how marketers do the work and how customers find businesses in the first place. How the two shifts are related.
→
How do AI image generators use copyrighted art?
AI image generators train on datasets that often include copyrighted art, and whether that's infringement is a genuinely unsettled legal question.
→
What is the difference between supervised and unsupervised learning?
Supervised learning trains on labeled examples. Unsupervised learning finds structure with no labels. How the distinction determines which fits your problem.
→
How can I build an AI chatbot for my business website?
Building an AI chatbot involves more real decisions than adding a chat widget. The actual build path: scope, grounding, and a fallback plan from day one.
→
What is Artificial General Intelligence (AGI), and when will it happen?
AGI describes a genuinely general capability current AI systems don't have. Why any confident timeline for reaching it deserves real skepticism.
→
How is AI being used in healthcare and medical diagnosis?
AI in healthcare spans administrative automation, clinical decision support, and imaging pattern recognition, each with different stakes and autonomy.
→
What are the ethical risks and dangers of artificial intelligence?
AI ethics isn't one vague topic. Bias, confident errors, privacy, job displacement, misinformation, power concentration, and accountability, explained.
→
How to write effective AI prompts
A model's output is generated directly from its context, so clarity and specificity are the highest-leverage factors in prompt quality.
→
How does generative AI create text, images, and video?
Text, image, and video generation share an underlying idea, but the specific mechanisms and failure modes genuinely differ across each medium.
→
Will AI replace software engineers and programmers?
AI is genuinely good at generating well-specified code. It still struggles with business ambiguity, architecture tradeoffs, and accountability.
→
How do large language models (LLMs) actually work?
An LLM generates text by predicting the most plausible next token, repeated over and over. How that simple mechanism produces such capable behavior.
→
Semantic search vs. keyword search: how AI-era search actually matches content
Semantic search matches meaning, not literal words. Why that shift makes thorough, natural-language content the real optimization strategy now.
→
Does client-side JavaScript hurt your AI search visibility?
Unlike Google's crawler, evidence suggests major AI crawlers generally don't execute JavaScript. Why that matters for GEO, and how to fix it.
→
Schema markup for AEO: what actually matters, and how to implement it right
A handful of schema types do most of the real work for AEO: FAQPage, Article, HowTo, and Organization. What each does and how to implement them.
→
How to structure content so AI can actually extract it
Content written to be extracted needs a different structure. How to lead with the answer, structure around real questions, and stay self-contained.
→
Why unlinked brand mentions matter for GEO, even without a single click
A mention of your brand without a link still shapes how AI systems evaluate you. Why unlinked mentions carry real weight for GEO.
→
How to get your brand cited by ChatGPT and Perplexity
No shortcut bypasses substance, but there's a real, specific set of practices that improves your odds of AI citation.
→
Will generative AI actually replace traditional search traffic?
Generative AI isn't replacing search, it's splitting the informational-query share of it. Where traditional search still dominates.
→
How LLMs actually decide what to cite, and what it means for your content
AI citation runs on retrieval, not traditional ranking. What actually seems to influence whether content gets retrieved and cited.
→
SEO vs. AEO vs. GEO: what's actually different, and why you need all three
SEO gets you found, AEO gets you quoted directly, GEO gets you recommended by name in AI conversations. How the three actually relate.
→
How to choose the best AI for image generation, and why taste matters more here
Image quality is more subjective than text or code quality. What to actually evaluate: prompt adherence, consistency, licensing, and editability.
→
How to choose the best AI for math and logic, and why verification matters most here
Math and logic have real right answers, which makes them checkable, but also easy to get confidently wrong. How to actually evaluate a model for this.
→
How to choose the best AI for writing and essays, and why one model rarely does it all
Research, drafting, editing, and fact-checking need different strengths. Why a single "best AI for writing" recommendation rarely holds up.
→
How to choose the best AI for coding, without relying on a ranking that will go stale
Coding model rankings go stale within months. The evaluation framework that stays useful: multi-step handling, codebase context, tool use, and real cost.
→
Agentic AI vs. AI agents: the actual difference, and why it matters for scoping
Agentic AI is a category and design philosophy. AI agents are the specific systems built within it. The actual relationship, and where scope mismatches happen.
→
What is AI-native, and how is it different from an AI feature?
AI-native describes a product where the model is the core of what it does, with architecture, data model, and UX designed around it from day one.
→
What is agentic AI, and how is it different from an AI agent?
Agentic AI describes a design philosophy: systems built to pursue a goal through autonomous, multi-step reasoning, not a single prompt-response exchange.
→
What are AI agents, and how are they different from a chatbot?
An AI agent decides its own next step toward a goal, using tools and adapting to what it learns, rather than following a fixed script.
→
Artificial intelligence vs. machine learning vs. deep learning vs. generative AI: how they actually relate
These are nested categories, not four separate things. How AI, ML, deep learning, and generative AI actually relate, and why it matters for scoping.
→
How to choose a reasoning effort budget for your use case, instead of defaulting to maximum
Defaulting to maximum reasoning effort on every request is a common, expensive mistake. How to actually match effort to task difficulty and latency needs.
→
Why AI adoption fails on the team, not the technology
A well-built AI system can still fail to change how work gets done. What actually blocks team adoption, and what a rollout that accounts for it looks like.
→
Why your AI agent's context keeps growing, and quietly costing you more
Every turn resends the full conversation, so context and cost compound silently. Why it happens, and how to actually keep it under control.
→
PII in AI agent context: the three paths it actually takes in, and the two you're probably missing
Most teams only guard direct user input against PII exposure. Tool call responses and accumulated session context are the two paths that get missed.
→
AI agent vs. AI copilot: what's actually different, and how to choose
Agent and copilot describe genuinely different levels of autonomy. What actually separates them, and how to pick the right one for a task.
→
Prompt engineering vs. fine-tuning vs. RAG: which one actually solves your problem
These solve different problems, and the most common mistake is reaching for the expensive option before ruling out the cheap one first.
→
Agent framework vs. building it yourself: how to actually decide
Adopting a full agent orchestration framework versus a thin custom layer on a vendor SDK is a real fork. What actually determines which is right.
→
Vector database vs. pgvector: do you actually need a dedicated one?
A dedicated vector database is unnecessary complexity for a real share of workloads, and the right call for another. The actual decision framework.
→
The AI vendor lock-in question: how portable is what we build for you?
What's actually portable between AI vendors by design, what carries real switching cost, and the one question worth asking before you sign.
→
AI agent user experience: designing for trust, not just accuracy
An AI agent can be accurate and still feel untrustworthy. What actually builds trust in an AI interface, and why overconfident design backfires.
→
How we scope a fixed-price AI engagement (and when we won't)
Why AI projects are genuinely harder to scope at a fixed price than typical software, and how a short discovery phase makes the commitment honest.
→
AI for compliance-heavy industries: what changes vs. a standard build
Confidence thresholds, audit trails, and human-review boundaries have to be architectural decisions from the start in regulated industries, not an afterthought.
→
Retrieval quality: why your RAG system gives wrong answers even with the right documents
Having the right document indexed and actually retrieving and using it correctly are two separate problems, each with its own failure modes and fixes.
→
AI agent uptime and rollback: how to actually recover from a bad deployment
A bad AI deployment can hide in four places: code, model version, system prompt, or retrieval index. Each needs its own tested rollback path.
→
What happens when your AI vendor changes their pricing overnight
Model provider pricing and availability have shifted with little notice before. The architecture that makes it a decision instead of an emergency.
→
Function calling vs. MCP: what's the actual difference?
Function calling is a model capability. MCP is a protocol built on top of it. The real practical difference, and when a direct integration wins.
→
AI agent uptime and reliability: what SLA should you actually expect?
Infrastructure uptime, model provider availability, and quality degradation are three distinct categories a normal uptime number doesn't capture.
→
How to write a system prompt that actually survives contact with real users
What a resilient system prompt actually includes beyond the happy path, and how to test one before real users do.
→
The real cost of a failed AI pilot, and how to avoid becoming one
The visible costs of a failed AI pilot are rarely the biggest ones. What actually gets expensive, and how to scope a pilot so its result is trustworthy.
→
AI agent vs. traditional automation: what's actually different from RPA
RPA replays fixed scripts and breaks on any deviation. AI agents reason about content and adapt. Why the two are often complementary, not competing.
→
How to write an AI project brief that actually gets you an accurate quote
What to include in an AI project brief so the quote you get back actually reflects the work, not a guess dressed up as a number.
→
AI agent testing environments: how to simulate edge cases before they hit production
Edge-case simulation, sandboxed tool execution, regression detection, and load testing, the difference between production QA and real agent testing.
→
Low-code vs. custom-built AI agents: when the no-code platform breaks down
Where low-code agent platforms genuinely shine, where they break down, and how to know when you've outgrown one.
→
Why your AI chatbot needs a fallback plan, and what a good one looks like
What separates a trustworthy chatbot from one that erodes trust: a well-designed fallback and handoff plan, not just confident answers.
→
Agentic commerce: what it means if you sell anything online
AI agents are increasingly shopping on customers' behalf. Here's why your product data matters more than your marketing copy now.
→
Multi-agent orchestration patterns: handoffs, supervisors, and swarms compared
Supervisor, handoff, and swarm patterns compared, where each works, where each breaks down, and how to actually choose.
→
AI agent identity and access management: the permissions problem nobody scopes correctly
Why traditional identity and access management doesn't transfer to AI agents, and what proper permission scoping actually requires.
→
How to build an AI agent evaluation harness that actually catches regressions
What to measure, how to build a representative dataset, and why an evaluation harness needs to run continuously, not just once.
→
The AI deployment gap: why adoption doesn't mean production
Most organizations have adopted AI in some form. Very few have gotten agentic AI into real production use. Here's what's actually causing that gap.
→
AI agent memory: why your agent forgets things it shouldn't
The memory layer vs. context layer distinction that actually solves agent forgetfulness, and the staleness problem most teams don't test for.
→
MCP in 2026: what actually changed, and does it affect your integration?
MCP's 2026 spec update brought stateless architecture and governance improvements aimed at enterprise scale. Here's what changed.
→
How to measure AI agent ROI, with the formula we actually use
A practical framework for measuring AI agent ROI: the formula, what belongs on each side of it, and a two-tier measurement approach.
→
What is a guardian agent, and does your AI system need one?
Gartner's new category for continuous runtime oversight of AI agents, explained: what it does, and whether you need one yet.
→
How to evaluate an AI development agency before you hire one
The real questions to ask, and the red flags worth taking seriously, before you commit to an AI development agency.
→
AI observability: what to monitor once your agent is in production
Cost attribution, confidence drift, and the silent failure modes traditional application monitoring misses entirely.
→
Building AI features into a mobile app: native vs. cross-platform vs. web wrapper
How to actually choose based on latency, platform access, and interaction quality, not just what's fastest to prototype.
→
What is Model Context Protocol (MCP) actually used for in production?
What changes when MCP moves from a prototype to something multiple teams depend on safely: permissions, ownership, and testing for what an agent should decline to do.
→
Single agent vs. multi-agent: how to actually decide
Why multi-agent shouldn't be the default, and how to test whether a single agent is actually sufficient first.
→
How long does it take to build an AI agent? A realistic timeline
A realistic breakdown of AI agent build timelines by scope, and why backend integration and data quality are usually the actual bottleneck, not the AI itself.
→
The real difference between an AI consultancy and an AI development agency
A clear breakdown of what actually separates a consultancy from a development agency, and why the line blurs in AI specifically.
→
What is an AI development agency, and what do they actually do?
A clear definition of what an AI development agency does, how it differs from a consultancy or in-house team, and what to actually look for.
→
How to choose between Claude, GPT, and Gemini for your product
A durable framework for choosing a model based on reasoning quality, cost, latency, and tool-use reliability for your specific use case, not a leaderboard.
→
AI agent security checklist: what to test before you launch
A 10-point adversarial checklist for AI agents with tool access, covering the indirect attack vectors and fallback paths standard QA usually misses.
→
What is prompt injection, and how do you actually defend against it?
The security problem that matters most for AI agents with tool access, and why indirect injection through data sources is the vector most teams miss.
→
AI chatbot vs. live chat: when a bot actually helps your website
The real question isn't chatbot or live chat, it's which of your visitors' questions are actually repeatable. Here's how to tell, and why the strongest setup usually combines both.
→
How much does it cost to build an AI voice agent?
A real breakdown of what drives voice AI cost: backend integration, latency requirements, and the ongoing tuning most teams forget to budget for.
→
What is MCP (Model Context Protocol), and when should you actually build one?
MCP is the fastest-growing standard for giving LLMs structured access to your systems. Here's what it actually does, where it beats a plain API integration, and where it's overkill.
→
AI-native vs. AI bolted on: why the architecture decision happens on day one
Most "AI features" fail not because the model is bad, but because they were added to an architecture that was never designed to support them. Here's how to tell which one you're building.
→
On-device vs. cloud AI for mobile apps: a real decision framework
Every mobile AI feature comes down to a latency, cost, and privacy tradeoff between on-device and cloud inference. Here's how we actually make that call for client apps.
→
RAG vs. fine-tuning: how to actually decide, not just default to RAG
RAG has become the default answer to every "how do I make the model know about my data" question. It's often right, but not always. Here's the framework we use to decide.
→
Why most AI prototypes never make it to production
A working demo and a production system are different engineering problems. Here are the five gaps that kill AI prototypes before they ship, and how to close them early.
→
How to actually estimate the cost of an AI agent before you build it
Token costs are the easy part. The real cost drivers in an agentic system are retries, tool calls, and context growth. Here's the model we use to price engagements accurately.
→

Have something specific you're building?

30-minute scoping call. No deck, just questions.