Ricin breaks your model. Not your data.

Why the most popular AI safety test secures the front door while leaving the back door wide open. Output safety and data confidentiality are technically two completely different mechanisms — and conflating them is exactly what’s behind the confusion on the work floor. Here’s how models actually handle your data, and what to arrange instead of the theatre.

June 17, 2026 · 9 min · Mark Westerweel

Curated, shareable skillsets for AI agents

A skill for an AI agent is a markdown file. That’s exactly the problem: anyone can drop one, nobody knows if it’s any good. Here’s how I turn them into a curated, signed, shareable library — and why the point isn’t the skills, it’s the curation.

June 15, 2026 · 4 min · Mark Westerweel