{R}R 開発ノート


合計 21 件の記事が見つかりました。

The Engineering of Intent, Chapter 5: Agentic Editors and Flow States

Chapter 5 of The Engineering of Intent blog series. The editor is where the wiring meets your hands. A teaser on the three generations of editor, how semantic search amplifies your codebase's virtues and vices, the flow killers that destroy productivity, and the shortcut rebind that doubled a team lead's output.
2026-04-21

The Engineering of Intent, Chapter 4: The Model Context Protocol (MCP)

Chapter 4 of The Engineering of Intent blog series. MCP is to agents what HTTP was to the early Web — a common protocol that turns bespoke integrations into reusable infrastructure. A teaser on host/client/server roles, the anatomy of a good tool, the six anti-patterns, and the security pitfalls every team trips over.
2026-04-20

Chapter 22: Identity in AI Systems — When the "User" Is an Agent

Chapter 22 of the OpenID: Modern Identity series — identity for AI systems: LLM authentication, the Model Context Protocol (MCP), Dynamic Client Registration for ephemeral agents, and the emerging patterns for trusting autonomous non-human actors.
2026-03-28

OpenClaw Engineering, Chapter 13: Hardening the Ecosystem

The final chapter: ecosystem security, the ClawHavoc incident, defending against malware in dependencies, confirming high-risk operations, and building auditing and disaster recovery systems.
2026-03-28

Chapter 21: Decentralized Identity — DIDs, Verifiable Credentials, and OID4VC

Chapter 21 of the OpenID: Modern Identity series — decentralized identity: DIDs (Decentralized Identifiers) without a central authority, Verifiable Credentials with selective disclosure, and OpenID for Verifiable Credentials (OID4VC) as the bridge from centralized to decentralized identity.
2026-03-27

Chapter 20: Passwordless Authentication — Passkeys, WebAuthn, and the End of the Password

Chapter 20 of the OpenID: Modern Identity series — passwordless authentication: passkeys as friendly public-key credentials, WebAuthn as the underlying browser API, and the FIDO2 ecosystem including hardware security keys.
2026-03-26

Chapter 18: Claims Design and Privacy — Identity Data Without Overshare

Chapter 18 of the OpenID: Modern Identity series — designing custom claims with namespacing and size discipline, attribute mapping across providers into a single internal schema, and privacy by design through minimization, selective disclosure, pairwise identifiers, and GDPR-ready retention.
2026-03-24

OpenClaw Engineering, Chapter 8: Event-Driven Workflows

How OpenClaw agents spring into action automatically via hooks, webhooks, and TypeScript handlers—without waiting for human invocation. From internal events to CI/CD pipelines.
2026-03-23

OpenClaw Engineering, Chapter 5: Connecting Multiple Channels

How to connect your OpenClaw agent to multiple messaging platforms (Telegram, WhatsApp, Discord, Slack) and manage multi-channel routing. Setup, configuration quirks, and troubleshooting for each platform.
2026-03-20

OpenClaw Engineering, Chapter 4: Managing the Gateway and Models

Configuring your running gateway with the onboard wizard, diagnostics, and openclaw.json. How to connect model providers, manage API keys securely, and route different queries to different models.
2026-03-19

Chapter 12: User Lifecycle Management — Provisioning, SCIM, and the De-Provisioning Problem

Chapter 12 of the OpenID: Modern Identity series — user lifecycle management: JIT and bulk provisioning, SCIM for cross-system sync, de-provisioning done right, role mapping from IdP claims, and identity architecture for multi-tenant SaaS.
2026-03-18

OpenClaw Engineering, Chapter 3: Deployment and Environment Setup

From local development to production: installing Node.js 22+, setting up Docker containers, and deploying OpenClaw to the cloud via AWS Lightsail or VPS providers.
2026-03-18

Chapter 16 – Execution Risks and Isolation

Chapter 16 of Master Claude Chat, Cowork and Code confronts the real security risks of AI systems that execute commands and manipulate files — from command injection to data exposure — and explains the isolation models that keep things safe.
2026-03-17

Chapter 9: SPA and Mobile Patterns — Auth in Hostile Environments

Chapter 9 of the OpenID: Modern Identity series — SPAs and mobile apps in hostile environments: XSS and CSRF defense, PKCE in the browser, the Backend-for-Frontend pattern, native app patterns, and refresh token rotation with reuse detection.
2026-03-15

Chapter 8: Securing Backend APIs — Bearer Tokens, Scopes, and Service-to-Service

Chapter 8 of the OpenID: Modern Identity series — securing backend APIs with bearer tokens, scope design for least privilege, token introspection versus local JWT validation, and the three mechanisms for service-to-service authentication.
2026-03-14

Chapter 13: Encapsulating Knowledge with Agent Skills — From Conversations to Autonomous Procedures

Chapter 13 of Master Claude Chat, Cowork and Code introduces Skills — reusable, encapsulated procedures that Claude executes autonomously. Covers SKILL.md structure, YAML frontmatter, trigger descriptions, and the Skills Library pattern for team distribution.
2026-03-14

Chapter 12: CLAUDE.md — Designing Guardrails That Shape How Claude Thinks

Chapter 12 of Master Claude Chat, Cowork and Code explores CLAUDE.md as a living constitution for AI behavior — positive constraints over prohibitions, complete financial and startup examples, instruction decay, hierarchical files, and anti-patterns to avoid.
2026-03-13

Chapter 10: Safe Legacy Code Refactoring — Horror Stories and the Discipline That Prevents Them

Chapter 10 of Master Claude Chat, Cowork and Code tackles the hardest problem in AI-assisted development — refactoring legacy code without introducing subtle bugs. Covers characterization tests, incremental verification, PR review, and catching hallucinations.
2026-03-11

Chapter 3: Core Concepts — The Vocabulary of OpenID Connect

Chapter 3 of the OpenID: Modern Identity series — the IdP/RP/user triangle, claims and JWTs, the three OIDC token types, consent and scopes, sessions vs tokens, and the boundary between authentication and authorization.
2026-03-09

Chapter 1: Why Identity Is Hard — The Trust Problem Behind Every Login

Chapter 1 of the OpenID: Modern Identity book series — why identity is a trust problem first and a technology problem second, and why authentication and authorization must never be conflated.
2026-03-07

OpenID: Modern Identity for Developers and Architects — A 22-Part Blog Series

Introduction and index for the 22-part blog series based on OpenID: Modern Identity for Developers and Architects by Sho Shimoda — with links to every chapter from Why Identity Is Hard through Identity in AI Systems.
2026-03-06