Blog

Notes on building Transit AI

Engineering notes, security thinking, release announcements, and the occasional thing we got wrong.

• Hardware People Are Allowed to Use AI

  Software chases the newest stack; infrastructure won't touch AI in production. That's a skill issue, not a hardware limit — here's how to make AI a force multiplier without the slop.

  July 1, 2026 · Knox Hutchinson

• Why We Made the AI Read-Only — and How We Enforce It

  Transit AI's network agent is read-only by architecture, not policy — enforced by four abilities, per-vendor allowlists, a build check, and your click.

  June 8, 2026 · Knox Hutchinson

• Anatomy of the TanStack supply-chain attack

  A worm hijacked TanStack's own CI and shipped 42 poisoned npm packages — no maintainer phished, no credential stolen. What to look for, and what to do.

  May 12, 2026 · Knox Hutchinson