Engineering LLM Gym

Bronze to Platinum: Grading My Own Training Data

Rene Fichtmueller / 2026-08-17 / ~2 min read
Engineering LLM Gym

One GPU, Many Models: Building a Fair Queue

A home fine-tuning setup kept corrupting runs until every training script agreed to ask permission first. The lease was the easy part; finding every script that skipped it was not.

Rene Fichtmueller / 2026-08-16 / ~3 min read
Engineering Magatama Security

Provenance: Why Not Every Finding Deserves the Same Trust

Magatama can act on its own when a signal comes from scanners I built and vetted myself. Everything else, no matter how alarming it looks, only gets to flag something, never touch it.

Rene Fichtmueller / 2026-08-15 / ~3 min read
Engineering Magatama Security

The Default That Wasn't a Default

A hardcoded database password sat quietly in Magatama's config code for years, meant as a harmless fallback. Rotating it was the easy part, deciding what should happen when a secret goes missing was the actual work.

Rene Fichtmueller / 2026-08-14 / ~3 min read
Engineering Magatama

Watching the Watcher: Observability for an Autonomous Agent

Magatama monitors my server fleet so I don't have to. Recently I had to admit it needed monitoring of its own, and figuring out how much was the actual problem.

Rene Fichtmueller / 2026-08-13 / ~3 min read
Engineering Magatama Security

Multilingual Attacks and Why English-Only Defenses Fail

My prompt-injection scanner only checked for English keywords, which works fine until someone writes the same instruction in another language. Extending it to two dozen languages turned up a dumber problem: a word-boundary check that had quietly never worked against non-Latin scripts.

Rene Fichtmueller / 2026-08-12 / ~3 min read
Engineering Magatama

Rollback Is a Feature, Not an Afterthought

Magatama, the agent that watches my server fleet, can write a flawless rollback plan on its own. It still isn't allowed to execute one without me. Here's why undo turned out to be the hardest permission to hand over, not the easiest.

Rene Fichtmueller / 2026-08-11 / ~2 min read
Engineering Magatama Security

Patching in the Restrictive Direction Only

A rule I made for myself while hardening Magatama, my own ops agent: every fix has to make the system stricter, never more convenient. It turns out the hardest part is being the only person that rule ever inconveniences.

Rene Fichtmueller / 2026-08-10 / ~3 min read
Engineering Magatama Security AI

Never Silently Drop an Alert

The instinct in security tooling is to block anything that looks suspicious. For an agent that triages real alerts, I had to convince myself that blocking is sometimes the more dangerous choice.

Rene Fichtmueller / 2026-08-09 / ~2 min read
Engineering Magatama Security

Feeds That Lie: The Cache That Went Silently Stale

A defensive try/catch in Magatama's advisory-feed fetcher quietly turned a failed request into a "fresh" empty cache, erasing the last good data with nothing anywhere to flag it. The fix wasn't clever, just three changes that stopped the code from confusing "returned" with "worked."

Rene Fichtmueller / 2026-08-08 / ~2 min read
// projects & tools
// about the author
Rene Fichtmueller
Social Networker
20+ years building and breaking networks. Optical transport, peering, data center infrastructure. Writing about the things that go wrong at 2AM — and how to prevent them.