Latest post
An AI Security Reviewer for Squirrel Notes
When I wrote How Squirrel Notes Keeps Your Data Private, the promise was simple: I don't want my service to know anything about anything. Your notes are encrypted in the browser, and the server only ever sees ciphertext.
That promise is easy to make once and hard to keep across hundreds of pull requests, most of them written by an AI. So every change that touches encryption, auth, user data or infrastructure goes past one more agent before it merges: infosec.
This post covers why I do it, what it's caught, what it costs, and how it's changed since March.
aisecuritysoftware-development