Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Showing 1-5 of 235 articles.

Engineering

MCP Spotlight: PostgreSQL MCP Server — The Database Bridge With Read-Only Default, Query Allow-List, Parameterized Statements, and the Schema-Aware Default for Agents

The official PostgreSQL MCP Server by Anthropic — ~12 focused tools (list_schemas, list_tables, describe_table, query, explain). Read-only is the default, write-mode requires explicit opt-in with statement-type filtering. Parameterized queries via $1, $2 placeholders (SQL injection impossible). MIT-licensed.

Jul 24, 2026Engineering

Read article

Product

Facio's Memory Hierarchy Discipline: How AI Agents Decide What to Remember, What to Forget, and What to Surface at the Right Moment

Jul 24, 2026Product

Facio's Memory Hierarchy Discipline: How AI Agents Decide What to Remember, What to Forget, and What to Surface at the Right Moment

AI agents accumulate state: conversation history, tool results, intermediate reasoning, user preferences, learned facts. The naive approach stores everything and hopes the model sorts it out. The disciplined approach treats memory as a hierarchy with explicit retention policies, decay functions, relevance scoring, and surfacing mechanisms. Facio's memory hierarchy discipline gives AI agents the structural framework to remember what matters, forget what doesn't, and surface the right information at the right moment without overwhelming the context window.

Security

AIBOM and CycloneDX ML-BOM: Why AI Agent Supply Chains Need Their Own Software Bill of Materials in 2026

Jul 24, 2026Security

AIBOM and CycloneDX ML-BOM: Why AI Agent Supply Chains Need Their Own Software Bill of Materials in 2026

The May 2026 G7 AI SBOM Framework and the HuggingFace pickle RCE wave made AIBOM mandatory. CycloneDX ML-BOM is the format, Sigstore/Cosign and in-toto are the provenance, the ingestion gate is the enforcement, and the five-stage maturity ladder is the roadmap. Five supply chain layers (model weights, tokenizers, frameworks, tools, data sources) require their own AIBOM components.

Human-in-the-loop

HITL and the Stop Rule: Why Every Reviewer Should Have a Personal Threshold for Rejecting on Sight

Jul 24, 2026Human-in-the-loop

HITL and the Stop Rule: Why Every Reviewer Should Have a Personal Threshold for Rejecting on Sight

Every experienced reviewer has a "stop rule" — a personal threshold below which they reject the action immediately, regardless of the policy. The stop rule is not in the manifest. It's not in the training. It's not in the metrics. It's in the reviewer's intuition. The stop rule is the most underrated signal in HITL — and the most invisible. Here is why personal stop rules matter, how to surface them, and what changes when the system's rules and the reviewer's rules are aligned.

Engineering

MCP Spotlight: Fetch MCP Server — Anthropic's Reference Implementation for HTML-to-Markdown Web Reading, Length-Bounded Retrieval, and the Web-Content-Default for Agents

Jul 23, 2026Engineering

MCP Spotlight: Fetch MCP Server — Anthropic's Reference Implementation for HTML-to-Markdown Web Reading, Length-Bounded Retrieval, and the Web-Content-Default for Agents

The official Fetch MCP Server by Anthropic — 1 tool (fetch), HTML-to-Markdown conversion, length-bounded output (default 5000 chars), agentjacking defense, read-only safety. The web-content-reading default for AI agents in 2026. MIT-licensed, available via NPX or Docker.