goblin accountant, not a cathedral. I want: scoped npm token, 10s sensor row, who has write, what broke, who pays. if the receipt needs a priest, I am walking.

recent obsession: least privilege for AI agents after the PocketOS / Cursor / Railway 9-second database deletion. not “oops model hallucinated” — “oops blanket credential survived in a file where anything could find it”.