I build AI agents for security, and the tools I need along the way.
Tech Lead at RedCarbon. I write mostly Go, and I share everything I learn.
That's me, mid-talkWriting
AI Agent Sessions Are a Data Store Nobody Designed14 Oct 2026
BuildingArgusOpen-source AI security review agent written in Go. It runs real scanners (Semgrep, Gitleaks, OSV-Scanner), reads their findings, and reasons about them like an analyst would.
Next talkSecuring Go for Production: Best Practices, Supply Chain, TestingGoLab 2026 · 1 Nov
How I work
What you learn, you must share.
Knowledge shared is not knowledge lost: it's knowledge multiplied.
- 0101Decisions get written down.ADRs sit in the repo next to the code they explain, so the reasoning survives the commit.
- 0202I publish what I learn, including what did not work.I Built a Tool I Don't Use is the retrospective of a tool I shipped, was proud of, and never used.
- 0303Then I go say it out loud.On stage, in workshops, in the communities I help run. All talks
By topic
Notes from the work
AI and security
Introducing Argus: The Code Security Colleague Your Team Doesn't Have2026Stop Prompting. Start Thinking.2026AI Will Not Secure Your Codebase. But It Can Reveal Dangerous Git Habits.2025
In public
Communities I help run
Schrodinger HatInternational open source community I co-founded. 20k+ people reached, 100+ speakers at events across Europe.Open Source DayThe open source conference I co-organise in Florence. A full day of talks, workshops and community.Spoken at ComeToCode, GoLab, WeAreDevelopers World Congress, KCD Italy, DevOps Day
Newsletter
One email a month
A monthly digest of everything I write, build and speak about.