{R}R 開発ノート


合計 49 件の記事が見つかりました。

The Engineering of Intent, Chapter 2: Cognitive Load and Material Disengagement

Chapter 2 of The Engineering of Intent blog series. When the agent does most of the typing, the real failure mode is the engineer who has stopped engaging. A teaser on material disengagement, impressionistic scanning, the autocomplete trap, decision fatigue, and the seven habits of engaged engineers.
2026-04-18

Frictionless SaaS Chapter 16: The Power of Self-Service

Chapter 16 preview of Frictionless SaaS: the Self-Serve Maturity Model, the Independence Principle, and how self-serve billing and account management turn scalability into a competitive moat.
2026-04-06

Chapter 21: Decentralized Identity — DIDs, Verifiable Credentials, and OID4VC

Chapter 21 of the OpenID: Modern Identity series — decentralized identity: DIDs (Decentralized Identifiers) without a central authority, Verifiable Credentials with selective disclosure, and OpenID for Verifiable Credentials (OID4VC) as the bridge from centralized to decentralized identity.
2026-03-27

OpenClaw Engineering, Chapter 11: Continuous Learning with OpenClaw-RL

How OpenClaw-RL extracts training signals from conversations and uses them to improve agent behavior continuously. From binary feedback to token-level distillation, agents learn from every interaction without retraining the base model.
2026-03-26

Chapter 20: Passwordless Authentication — Passkeys, WebAuthn, and the End of the Password

Chapter 20 of the OpenID: Modern Identity series — passwordless authentication: passkeys as friendly public-key credentials, WebAuthn as the underlying browser API, and the FIDO2 ecosystem including hardware security keys.
2026-03-26

Chapter 19: Observability and Operations — Identity You Can Actually Run

Chapter 19 of the OpenID: Modern Identity series — observability and operations for identity systems: structured authentication logging with correlation IDs, distributed tracing of login flows, and immutable audit trails aligned to regulatory requirements.
2026-03-25

OpenClaw Engineering, Chapter 8: Event-Driven Workflows

How OpenClaw agents spring into action automatically via hooks, webhooks, and TypeScript handlers—without waiting for human invocation. From internal events to CI/CD pipelines.
2026-03-23

Chapter 16: Zero Trust Identity — When Every Request Is an Authentication Decision

Chapter 16 of the OpenID: Modern Identity series — Zero Trust identity: identity as the perimeter instead of the network, continuous verification via CAEP, and device trust and conditional access feeding into authorization decisions.
2026-03-22

OpenClaw Engineering, Chapter 7: The Skill Ecosystem

Bundled skills vs workspace skills, skill discovery and context, publishing to ClawHub, managing 13,000+ community skills without collision, semantic search, and the meta-skills that let agents improve themselves.
2026-03-22

Chapter 15: FAPI and High-Stakes Security — When the Defaults Aren't Enough

Chapter 15 of the OpenID: Modern Identity series — FAPI for high-stakes scenarios: what FAPI 1.0 Advanced and 2.0 require, Pushed Authorization Requests (PAR), JWT-Secured Authorization Requests (JAR), and migrating from FAPI 1.0 Advanced to FAPI 2.0.
2026-03-21

Chapter 14: Hardening Your Identity Stack — Setting the Defaults That Keep You Safe

Chapter 14 of the OpenID: Modern Identity series — hardening defaults that neutralize common attacks: strict redirect URI matching, audience validation to solve the confused deputy problem, token lifetime tuning, and refresh token binding, rotation, and revocation.
2026-03-20

OpenClaw Engineering, Chapter 5: Connecting Multiple Channels

How to connect your OpenClaw agent to multiple messaging platforms (Telegram, WhatsApp, Discord, Slack) and manage multi-channel routing. Setup, configuration quirks, and troubleshooting for each platform.
2026-03-20

Chapter 19 – Measuring AI Effectiveness

Chapter 19 of Master Claude Chat, Cowork and Code tackles the question every team eventually asks: is our AI actually working? Learn to build metrics frameworks, structured evaluations, and workflow acceleration measurements that prove (or disprove) AI's value.
2026-03-19

Chapter 13: Threat Modeling OpenID Systems — Thinking Like the Adversary

Chapter 13 of the OpenID: Modern Identity series — threat modeling for OIDC systems: token theft vectors and defenses, replay attacks and nonce validation, CSRF and state parameter mismanagement, redirect abuse and mix-up attacks.
2026-03-19

OpenClaw Engineering, Chapter 4: Managing the Gateway and Models

Configuring your running gateway with the onboard wizard, diagnostics, and openclaw.json. How to connect model providers, manage API keys securely, and route different queries to different models.
2026-03-19

Chapter 18 – Sub-Agents and Multi-Agent Collaboration

Chapter 18 of Master Claude Chat, Cowork and Code explores multi-agent architecture — how to decompose complex problems into specialized sub-agents, coordinate parallel execution, and synthesize results into coherent outputs.
2026-03-18

Chapter 12: User Lifecycle Management — Provisioning, SCIM, and the De-Provisioning Problem

Chapter 12 of the OpenID: Modern Identity series — user lifecycle management: JIT and bulk provisioning, SCIM for cross-system sync, de-provisioning done right, role mapping from IdP claims, and identity architecture for multi-tenant SaaS.
2026-03-18

Chapter 15 – Managing Context Rot and Entropy

Chapter 15 of Master Claude Chat, Cowork and Code tackles the silent failure mode of long-running AI sessions — context rot. Learn strategies for context compression, structured state management, and thinking like an operations team to keep Claude sharp over time.
2026-03-16

Chapter 10: Single Sign-On at Scale — Identity as Infrastructure

Chapter 10 of the OpenID: Modern Identity series — running identity at organizational scale: corporate IdPs (AD, Entra ID), the CIAM vendor ecosystem (Okta, Auth0, Entra ID), multi-tenant isolation, account linking, and external user access.
2026-03-16

Chapter 9: SPA and Mobile Patterns — Auth in Hostile Environments

Chapter 9 of the OpenID: Modern Identity series — SPAs and mobile apps in hostile environments: XSS and CSRF defense, PKCE in the browser, the Backend-for-Frontend pattern, native app patterns, and refresh token rotation with reuse detection.
2026-03-15

Chapter 14 – Connecting Systems with the Model Context Protocol (MCP)

Chapter 14 of Master Claude Chat, Cowork and Code explores the Model Context Protocol — the universal bridge that lets Claude connect to Slack, GitHub, Jira, Google Drive, and more, turning isolated AI into a deeply integrated workflow partner.
2026-03-15

Chapter 8: Securing Backend APIs — Bearer Tokens, Scopes, and Service-to-Service

Chapter 8 of the OpenID: Modern Identity series — securing backend APIs with bearer tokens, scope design for least privilege, token introspection versus local JWT validation, and the three mechanisms for service-to-service authentication.
2026-03-14

Chapter 7: Your First OpenID Application — The Handshake, End to End

Chapter 7 of the OpenID: Modern Identity series — building a real OIDC login end to end: the minimal flow, state and nonce, strict redirect URI matching, sessions from tokens, and the three flavors of logout.
2026-03-13

Chapter 12: CLAUDE.md — Designing Guardrails That Shape How Claude Thinks

Chapter 12 of Master Claude Chat, Cowork and Code explores CLAUDE.md as a living constitution for AI behavior — positive constraints over prohibitions, complete financial and startup examples, instruction decay, hierarchical files, and anti-patterns to avoid.
2026-03-13

Chapter 6: Discovery and Metadata — How Clients and Providers Find Each Other

Chapter 6 of the OpenID: Modern Identity series — how OIDC discovery, .well-known/openid-configuration, JWKS, and Dynamic Client Registration allow clients and providers to find each other without hand-crafted configuration.
2026-03-12

Chapter 11: CI/CD Integration and Automation — Claude Code in Your Pipeline

Chapter 11 of Master Claude Chat, Cowork and Code shows how to deploy Claude Code into CI/CD pipelines — GitHub Actions, GitLab CI, automated PR reviews, security audits, documentation sync, cost management, and production safety patterns.
2026-03-12

Chapter 5: Tokens in Depth — What's Actually in That JWT

Chapter 5 of the OpenID: Modern Identity series — what's really inside an ID Token, Access Token, and Refresh Token, how JWTs are structured, how to validate signatures correctly, and how DPoP and mTLS bind tokens to their legitimate holders.
2026-03-11

Chapter 3: Core Concepts — The Vocabulary of OpenID Connect

Chapter 3 of the OpenID: Modern Identity series — the IdP/RP/user triangle, claims and JWTs, the three OIDC token types, consent and scopes, sessions vs tokens, and the boundary between authentication and authorization.
2026-03-09

Chapter 2: From OpenID to OpenID Connect — How the Industry Got This One Right

Chapter 2 of the OpenID: Modern Identity series — tracing how the industry moved from the original OpenID and SAML through OAuth 2.0 to OpenID Connect, and when to reach for each standard.
2026-03-08

Chapter 1: Why Identity Is Hard — The Trust Problem Behind Every Login

Chapter 1 of the OpenID: Modern Identity book series — why identity is a trust problem first and a technology problem second, and why authentication and authorization must never be conflated.
2026-03-07

OpenID: Modern Identity for Developers and Architects — A 22-Part Blog Series

Introduction and index for the 22-part blog series based on OpenID: Modern Identity for Developers and Architects by Sho Shimoda — with links to every chapter from Why Identity Is Hard through Identity in AI Systems.
2026-03-06

Master Claude, Chapter 3: Understanding Entropy and Prompting Fundamentals — Why Your Prompts Fail and How to Fix Them

Chapter 3 of Master Claude Chat, Cowork and Code explains why some prompts work and others fail — through the lens of entropy and probability. Covers XML-structured prompting, chain-of-thought reasoning, multishot examples, and a standard prompt template you can use immediately.
2026-03-04

Master Claude, Chapter 1: The Evolution of Large Language Models — From Markov Chains to Context Engineering

Chapter 1 of Master Claude Chat, Cowork and Code traces the journey from statistical text prediction to reasoning engines — and explains why context engineering, not bigger models, is where the next leap in AI productivity comes from.
2026-03-02

Art of Coding, Chapter 15: Code as a Team Sport

Code as a team sport: shared ownership, documentation as craft, and respecting the reader. The human practices that make software sustainable and teams thrive.
2026-01-12

Art of Coding, Part VI: The Human Side of Code

The human side of code: collaboration, culture, and the practices that make software sustainable. How teams thrive when they value people as much as process.
2026-01-11

Art of Coding, Chapter 14: Code Reviews and Pair Programming

Code reviews as mentorship and collaboration. How to write for reviewers, offer critique with respect, and build a team culture grounded in feedback.
2026-01-10

Art of Coding, Chapter 13: Testing as a Design Discipline

Testing is a design discipline. How well-written tests reveal awkward APIs, improve code clarity, and become the most reliable documentation of system behavior.
2026-01-09

Art of Coding, Chapter 12: Version Control as a Storytelling Tool

Git is not just a backup system—it's a narrative tool. How clean commits and thoughtful branching strategies turn version control into a form of storytelling.
2026-01-08

Monitoring, Logging, and Telemetry|Mastering Microsoft Teams Bots 5.3

Learn how to monitor and support your Microsoft Teams bot in production using logging, Azure Application Insights, and alerts. This section shows how to track user events, diagnose failures, and create telemetry that makes your bot reliable and supportable.
2025-04-17

Teams App Manifest and Packaging|Mastering Microsoft Teams Bots 5.2

Transform your bot into a full Teams app. This section walks through how to create a Teams app manifest, add branding, define scopes, and package your bot into a distributable .zip file for sideloading, internal use, or submission to the Microsoft App Store.
2025-04-16

Deploying to Azure|Mastering Microsoft Teams Bots 5.1

Learn how to deploy your Microsoft Teams bot to Azure for production use. This section walks through setting up an Azure App Service, configuring environment variables, connecting to Bot Channels Registration, and testing your bot in the cloud.
2025-04-15

Localization and Multi-Tenant Support|Mastering Microsoft Teams Bots 4.4

Prepare your Microsoft Teams bot for real-world deployment. This section covers how to support multiple languages using localization, and how to safely handle multiple organizations with multi-tenant support — including tenant isolation, data security, and consent flows.
2025-04-14

Message Extensions|Mastering Microsoft Teams Bots 4.3

Learn how to build search- and action-based Message Extensions in Microsoft Teams. This section shows how to let users interact with your bot directly from the message composer — to search records, fill forms, or insert rich cards — all without leaving the chat.
2025-04-13

Proactive Messaging|Mastering Microsoft Teams Bots 4.2

Learn how to build bots that initiate conversations in Microsoft Teams. This section explains proactive messaging — including when and how to use it, how to store conversation references, and best practices to ensure your bot helps without interrupting.
2025-04-12

Task Modules|Mastering Microsoft Teams Bots 4.1

Learn how to use Task Modules in Microsoft Teams to embed rich, interactive modal experiences inside your bot. This section explains how to launch, return data from, and design secure webviews that turn chat into structured user interaction.
2025-04-11

Rich Responses with Adaptive Cards|Mastering Microsoft Teams Bots 3.2

Learn how to create rich, interactive messages in Microsoft Teams using Adaptive Cards. This section explains how to design, send, and handle cards in your bot — making your bot feel less like a chat and more like a true app experience inside Teams.
2025-04-09

Bot Authentication and Identity|Mastering Microsoft Teams Bots 2.3

Learn how Microsoft Teams bots authenticate users and access secure data. This section covers SSO, OAuth 2.0, and the Microsoft Graph API, giving your bot the ability to understand identity and act on behalf of users—safely and seamlessly.
2025-04-07

Hello World Bot|Mastering Microsoft Teams Bots 2.2

Build your first Microsoft Teams bot with a simple Hello World response. This hands-on section walks you through using the Bot Framework SDK, setting up a local project with Node.js or .NET, using Ngrok to expose your endpoint, and testing your bot directly in Teams.
2025-04-06

Setting Up Your Environment|Mastering Microsoft Teams Bots 2.1

Start your Microsoft Teams bot development journey with a solid foundation. This section walks you through the essential tools—Node.js, .NET SDK, Ngrok, Azure CLI—and explains why setting up your dev environment the right way is critical to building bots successfully.
2025-04-05