# probl.me

> The personal blog of Richard Muffler, a cybersecurity and SaaS product manager building software in public. Two posts a week on product management craft, AI-assisted development, and the tech stack that runs the site. Every article is first-person and based on firsthand experience, including what did not work.

Content is licensed CC BY 4.0. Site code is MIT licensed.

## Posts

- [I Audited My Own Pipeline for Prompt Injection Gaps](https://probl.me/blog/prompt-injection-lessons-applied/): I wrote about prompt injection, then audited my own AI content pipeline and found two real gaps. Here's exactly what I found, and what I changed to fix them.
- [Writing a Spec Your AI Agent Can Actually Keep Following](https://probl.me/blog/ai-agent-spec-writing/): Most specs tell an AI agent what to do once, then get quietly ignored next session. Here's how to write one that verifies itself, from a real drift incident.
- [How I Built a Claude Agent Content Pipeline (and What Broke)](https://probl.me/blog/claude-agent-content-pipeline/): I built an AI content pipeline with Claude agents defined in a single markdown file, no framework. Here's how it works and the three things that broke first.
- [Prompt Injection Is Already Hiding in What AI Agents Read](https://probl.me/blog/prompt-injection-ai-agents/): Prompt injection hides in webpages, DNS records, emails, and PDFs that AI agents read. Here's what happened to me, and the defenses that actually help.
- [Why I SHA-Pin Every GitHub Action (and Automate Updates)](https://probl.me/blog/pin-github-actions-dependabot/): I lock every GitHub Action to its commit SHA instead of a mutable tag, then let Dependabot keep the pins current. Here's why a tag alone isn't enough.
- [How Context Limits Changed the Way I Build with AI](https://probl.me/blog/context-limits-design-constraint/): I was getting inconsistent answers and the AI kept forgetting what we'd built. Here's how I stopped fighting context limits and started designing around them.

## Pages

- [About Richard Muffler](https://probl.me/about/): Author credentials, work history, and background
- [Blog index](https://probl.me/blog/): All posts by date and category
- [RSS feed](https://probl.me/rss.xml): Machine-readable feed of all posts