# ai and machine learning (blogs) — RSS Amplifier Recent posts from the 4 feeds in the RSS Amplifier directory that cover ai and machine learning. Page: Feed: --- ## [How to Do Prompt Injection Regression Testing \[2026 CI\]](https://www.kunalganglani.com/blog/prompt-injection-regression-testing-ci) _2026-08-22 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Your prompt-injection evals are probably overfit to cute synthetic prompts. Here’s a CI-ready regression suite that still catches indirect injection: seed corpora, adversarial transforms, canary secrets, and hard fail gates. ## [AI Security Leader Playbook \[2026\]: 10 Controls That Ship](https://www.kunalganglani.com/blog/ai-security-leader-playbook) _2026-08-21 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A practical AI security leader playbook you can implement this quarter: inventory, approval gates, agent threat modeling, OWASP LLM Top 10 controls, vendor review, and incident response. ## [RayNeo Expands AR Glasses Lineup With iO Smart Glasses and GT Series](https://www.auganix.org/ar-news-rayneo-io-gt-max-smart-glasses/) _2026-08-21 · Sam Sprigg · Auganix.org_ In Augmented Reality News What’s the story? RayNeo is expanding its consumer augmented reality glasses lineup with the launch of its new iO Smart Glasses for ambient AI productivity and ... continue reading Source ## [How to Upgrade to Go 1.27 in Production \[Week-1 Checklist\]](https://www.kunalganglani.com/blog/go-1-27-upgrade-guide-production) _2026-08-20 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A pragmatic Go 1.27 upgrade playbook: toolchain pinning, CI matrix changes, perf validation (p99/allocs/GC), migration traps, and what to do with json/v2. ## [ChatGPT Down? 8 Fallback Patterns for API Outages \[2026\]](https://www.kunalganglani.com/blog/chatgpt-down-api-outage-fallback) _2026-08-20 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ When ChatGPT goes down, your app shouldn’t. A production playbook for detection, retries with jitter, circuit breakers, bulkheads, throttling, and multi-provider failover. ## [The Hidden Risk in Data Transfer](https://www.itsecurityguru.org/2026/08/19/the-hidden-risk-in-data-transfer/?utm_source=rss&utm_medium=rss&utm_campaign=the-hidden-risk-in-data-transfer) _2026-08-19 · Guru Writer · IT Security Guru_ Cybersecurity has become one of the most defining business challenges of recent times. Organisations have invested heavily in protecting their networks, securing cloud environments and strengthening identity and access management. At the same time, organisations are under increasing pressure to prove they are handling sensitive information securely, not just storing it safely but protecting it \[…\]… ## [Fake Crypto Exec Used Booby-Trapped Google Doc to Target Security Researcher After DEF CON](https://www.itsecurityguru.org/2026/08/19/fake-crypto-exec-used-booby-trapped-google-doc-to-target-security-researcher-after-def-con/?utm_source=rss&utm_medium=rss&utm_campaign=fake-crypto-exec-used-booby-trapped-google-doc-to-target-security-researcher-after-def-con) _2026-08-19 · Guru Writer · IT Security Guru_ A threat actor impersonating a senior executive at a well-known cryptocurrency media outlet attempted to infect a Huntress researcher with malware in the days following this year’s Black Hat and DEF CON conferences, according to new research from the security vendor. The campaign began on X (formerly Twitter), where an account impersonating the executive sent \[…\] The post Fake Crypto Exec Used… ## [Education Now the World’s Most-Attacked Sector as Cybercriminals Gear Up for Back-to-School](https://www.itsecurityguru.org/2026/08/19/education-cyberattacks-back-to-school/?utm_source=rss&utm_medium=rss&utm_campaign=education-cyberattacks-back-to-school) _2026-08-19 · Guru Writer · IT Security Guru_ Education has overtaken every other industry to become the most targeted sector for cyberattacks worldwide, according to new research from Check Point, with threat actors ramping up activity in the run-up to the new academic year. Between January and July 2026, schools, colleges, universities and research institutes faced an average of 4,696 weekly cyberattacks per \[…\] The post Education Now the… ## [Mojo Language Open Source \[2026\]: What Python Devs Get Now](https://www.kunalganglani.com/blog/mojo-language-open-source) _2026-08-19 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Mojo going Apache 2.0 changes the trust story. Here’s what’s actually open, how to install it, and where Mojo beats NumPy/Rust for real kernels in 2026. ## [Premier League Introduces Mandatory Cybersecurity Standards, Backed by Fines of Up to £100,000](https://www.itsecurityguru.org/2026/08/19/premier-league-cybersecurity-requirements/?utm_source=rss&utm_medium=rss&utm_campaign=premier-league-cybersecurity-requirements) _2026-08-19 · Guru Writer · IT Security Guru_ The Premier League has introduced mandatory cybersecurity requirements for its clubs for the first time, with non-compliant clubs facing fines of up to £100,000. The rules, which apply from the start of the 2026-27 season, mark a shift away from the league’s previous non-prescriptive security guidance towards a formal framework with fixed deadlines and evidence-based \[…\] The post Premier League… ## [One OS for your AI workforce (Sponsored)](https://crawlproof.com/a/YM0JxVGO7JrS) _2026-08-19 · **Sponsored**_ Build, direct, and supervise an AI workforce from a single operating workspace. ## [Why compliance does not guarantee cyber resilience](https://www.itsecurityguru.org/2026/08/19/why-compliance-does-not-guarantee-cyber-resilience/?utm_source=rss&utm_medium=rss&utm_campaign=why-compliance-does-not-guarantee-cyber-resilience) _2026-08-19 · Lara Joseph · IT Security Guru_ Cyber security has become one of the most audited and regulated areas of enterprise technology. Yet an organisation can satisfy every requirement on paper and still discover, during a real incident, that its systems, people or processes are not ready for the pressure that follows. Compliance can demonstrate that controls have been put in place; \[…\] The post Why compliance does not guarantee cyber… ## [NHS Supply Chain Opens Framework Tender That Includes Estimated £40M Immersive Technology Lot](https://www.auganix.org/xr-news-nhs-supply-chain-medical-simulation-framework/) _2026-08-19 · Sam Sprigg · Auganix.org_ In XR News What’s the story? NHS Supply Chain has published a tender notice for its planned Medical Simulation and Technologies Framework, inviting suppliers to tender for one or several ... continue reading Source ## [How to Set Up gitleaks + pre-commit + CI \[2026\]](https://www.kunalganglani.com/blog/gitleaks-pre-commit-ci-setup) _2026-08-19 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A terminal-first, defense-in-depth secrets workflow for 2026: staged-only hooks, CI full-history scans, baselines for legacy repos, and sane allowlists. ## [Virtuix Selects AVRT for U.S. Marine Corps VR Infantry Training System](https://www.auganix.org/vr-news-virtuix-avrt-us-marines/) _2026-08-18 · Sam Sprigg · Auganix.org_ In Virtual Reality News What’s the story? Virtuix has selected AVRT to supply weapons tracking and training content for the U.S. Marine Corps’ Infantry Fireteam Virtual Trainer system. Why it ... continue reading Source ## [Hacker Claims Millions of Records Stolen From Azure Tenants](https://www.itsecurityguru.org/2026/08/18/hacker-claims-millions-of-records-stolen-from-azure-tenants/?utm_source=rss&utm_medium=rss&utm_campaign=hacker-claims-millions-of-records-stolen-from-azure-tenants) _2026-08-18 · Guru Writer · IT Security Guru_ A threat actor is claiming to have stolen millions of employee records from the Microsoft Azure environments of several major companies, raising concerns that the information could be used to launch targeted phishing, impersonation, and privilege escalation attacks. The threat actor, known as “TheHatman,” has reportedly posted internal employee directories belonging to companies including… ## [2,000 Hacked WordPress Sites Were Secretly Running a Global Crime Ring](https://www.itsecurityguru.org/2026/08/18/2000-hacked-wordpress-sites-were-secretly-running-a-global-crime-ring/?utm_source=rss&utm_medium=rss&utm_campaign=2000-hacked-wordpress-sites-were-secretly-running-a-global-crime-ring) _2026-08-18 · Guru Writer · IT Security Guru_ A newly identified cybercrime operation dubbed StopAndProtect has been quietly running its entire criminal infrastructure through close to 2,000 hacked WordPress websites, according to new research from Check Point. Rather than relying on dedicated command-and-control servers, which are relatively easy for defenders to identify and take down, the group behind StopAndProtect compromised thousands… ## [How to Show Kubernetes Context in Starship Prompt \[2026\]](https://www.kunalganglani.com/blog/starship-prompt-kubernetes-context) _2026-08-18 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Build a fast Starship prompt that shows Kubernetes context/namespace safely, profiles slow modules (Git + k8s), and avoids leaking cluster names in demos. ## [International Cyber Expo Unveils New Talks for its Global Cyber Summit 2026](https://www.itsecurityguru.org/2026/08/18/international-cyber-expo-2026-new-talks/?utm_source=rss&utm_medium=rss&utm_campaign=international-cyber-expo-2026-new-talks) _2026-08-18 · Guru Writer · IT Security Guru_ International Cyber Expo has announced a new line-up of speakers and sessions for its Global Cyber Summit, with discussions set to tackle some of the biggest issues facing cybersecurity leaders. Sponsored by Huntress, the Global Cyber Summit will bring together senior security professionals, government representatives and industry experts at Olympia London on 29 and 30 \[…\] The post International… ## [Proton launches free tool to show enterprises what ChatGPT and Claude know about employees](https://www.itsecurityguru.org/2026/08/18/proton-launches-free-tool-to-show-enterprises-what-chatgpt-and-claude-know-about-employees/?utm_source=rss&utm_medium=rss&utm_campaign=proton-launches-free-tool-to-show-enterprises-what-chatgpt-and-claude-know-about-employees) _2026-08-18 · Guru Writer · IT Security Guru_ Privacy-focused tech company Proton has launched a free tool designed to show users exactly what large language models such as ChatGPT and Claude have learned about them from months or years of conversation history, a capability that speaks directly to the shadow AI problem now facing enterprise security teams. The tool, called AI Paper Trail, \[…\] The post Proton launches free tool to show… ## [How to Set Up Self Hosted DevContainers \[2026\] (SSH + VS Code)](https://www.kunalganglani.com/blog/self-hosted-devcontainers-ssh-vscode) _2026-08-18 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A reproducible “remote dev box” on one VM: hardened SSH, fast BuildKit-cached DevContainers, and a CI check that prevents IDE/CI drift. No Codespaces required. ## [Licensed Dispensaries, Pay with Crypto (Sponsored)](https://crawlproof.com/a/9dcL95VxsKrK) _2026-08-18 · **Sponsored**_ Search verified licensed dispensaries and pay with Bitcoin, Lightning, or stablecoins. ## [How to Redact Secrets in an AI Coding CLI Tool \[2026\]](https://www.kunalganglani.com/blog/redact-secrets-ai-cli) _2026-08-17 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Build a universal “safe AI CLI wrapper” that sits in front of any coding agent, redacts secrets, enforces basic policies, and writes JSONL audit logs you can ship to a SIEM. ## [RAG Data Leakage Test Suite \[2026\]: CI Red-Team Setup](https://www.kunalganglani.com/blog/rag-data-leakage-test-suite) _2026-08-17 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Build an automated red-team suite for RAG apps: canary tokens, regex + similarity detectors, multi-step prompt-injection attacks, and a CI risk score that blocks risky merges. ## [How to Reduce Rust Compile Time \[2026\] (sccache + mold)](https://www.kunalganglani.com/blog/reduce-rust-compile-time) _2026-08-16 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A measurable 2026 playbook to reduce Rust compile time: profile with Cargo timings, fix the build graph, get real sccache hit rates, and cut link time with mold. ## [Bun vs Node Performance 2026: Cold Start, Memory, WebSockets](https://www.kunalganglani.com/blog/bun-vs-node-performance-2026) _2026-08-16 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Cold starts and memory decide your infra bill. WebSockets decide your tail latency. Here’s how Bun and Node compare in 2026, with a reproducible harness and deployment math. ## [How to Pick LLM Application Observability Metrics \[2026\]](https://www.kunalganglani.com/blog/llm-observability-metrics) _2026-08-15 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Token logs are table stakes. Here’s the minimum set of LLM application observability metrics for tools, RAG, caching, refusals, and privacy-safe logging that actually debugs production incidents. ## [7-Step Plan: eBPF Observability Without Sidecars on Kubernetes](https://www.kunalganglani.com/blog/ebpf-observability-sidecars-kubernetes) _2026-08-15 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A pragmatic migration plan for Kubernetes teams moving from Envoy sidecars to node-level eBPF observability, with P99 validation and telemetry cost controls baked in. ## [The 80% Problem: Why AI resilience is more important than ever](https://www.itsecurityguru.org/2026/08/14/the-80-problem-why-ai-resilience-is-more-important-than-ever/?utm_source=rss&utm_medium=rss&utm_campaign=the-80-problem-why-ai-resilience-is-more-important-than-ever) _2026-08-14 · Guru Writer · IT Security Guru_ AI has been transformational for the workplace, saving time on repetitive tasks and freeing skilled staff to focus on higher-value work. It has become so embedded in organisations that ISACA’s research recently found that 82% of European companies expressly permit the use of AI at work. However, there is a difference between using AI and \[…\] The post The 80% Problem: Why AI resilience is more… ## [Stacked PRs on GitHub \[2026\]: A Copy-Paste Workflow](https://www.kunalganglani.com/blog/stacked-prs-github-workflow) _2026-08-14 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A GitHub-native stacked PR workflow you can copy today: branch naming, dependent PR chains, reviewer hygiene, CI strategy, and a restack playbook when bases move. ## [ThirdEye Gen Expands MIDAS AR Platform for First Responders and Industry](https://www.auganix.org/ar-news-thirdeye-midas-expansion/) _2026-08-14 · Sam Sprigg · Auganix.org_ In Augmented Reality News What’s the story? ThirdEye has expanded its MIDAS platform into Response and Industrial product lines for hands-free AR use across emergency and hazardous work environments. Why ... continue reading Source ## [Local LLM Break-Even Math \[2026\]: Power, Idle, Depreciation](https://www.kunalganglani.com/blog/local-llm-break-even-cost-model) _2026-08-14 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Most “GPU price ÷ tokens” break-even math is wrong. Here’s a spreadsheetable local LLM total-cost model that includes idle power, utilization, depreciation, failures, and opportunity cost. ## [Point a Domain, Start a Pit (Sponsored)](https://crawlproof.com/a/5HF5n41gtQFZ) _2026-08-14 · **Sponsored**_ Point any domain to a blacked-out, poison-green coming-soon page with an email waitlist. ## [OpenAI Codex Desktop Linux Install Guide \[2026\]: Sandbox + Data Egress](https://www.kunalganglani.com/blog/codex-desktop-linux-install-guide) _2026-08-13 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A Linux-first install + hardening checklist for Codex Desktop: verify downloads, sandbox the app, isolate SSH keys, route egress through a proxy, and prove what data leaves your machine. ## [Glydr Brings Hybrid Foot and Gamepad Controls to PC Gaming and VR](https://www.auganix.org/vr-news-glydr-controller-translation-beta/) _2026-08-13 · Sam Sprigg · Auganix.org_ In VR Gaming News What’s the story? Glydr has launched Controller Translation in beta, letting its foot-pedal controller combine with a gamepad so games recognize both as one unified virtual ... continue reading Source ## [DPVR Announces Commercial Availability Timeline for P1 Max Enterprise Standalone VR Headset](https://www.auganix.org/vr-news-dpvr-p1-max-commercial-availability-timeline/) _2026-08-13 · Sam Sprigg · Auganix.org_ In Virtual Reality News August 12, 2026 — DPVR, a global developer and manufacturer of virtual reality (VR) hardware solutions, has this week announced pricing and availability details for ... continue reading Source ## [AI Agent Sandbox Linux VM \[2026\]: Safe Tool Use, No K8s](https://www.kunalganglani.com/blog/ai-agent-sandbox-linux-vm) _2026-08-13 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ If your coding agent can run \`git\`, \`pip\`, or a shell, it deserves its own disposable Linux VM. Default-deny egress, snapshot rollback, scoped secrets, and per-run audit bundles. No Kubernetes required. ## [Deepfake Voice Detection: 7-Step Detector Eval Guide \[2026\]](https://www.kunalganglani.com/blog/deepfake-voice-detection-evaluation) _2026-08-12 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Deepfake voice detection is easy to demo and hard to operationalize. Here’s a repeatable 7-step methodology to evaluate detectors: datasets, telephony transforms, multilingual edge cases, metrics, thresholds, and deployment playbooks. ## [Maersk Training, Provider of VR Safety Training, to be Acquired by OpenGate Capital](https://www.auganix.org/vr-news-opengate-capital-acquires-maersk-training/) _2026-08-12 · Sam Sprigg · Auganix.org_ In Virtual Reality News What’s the story? OpenGate Capital has agreed to acquire Maersk Training and its Maersk H2S Safety Services subsidiary from A.P. Moller – Maersk, with closing expected ... continue reading Source ## [Debug HTTP/3 QUIC in Production: 8-Step Playbook \[2026\]](https://www.kunalganglani.com/blog/debug-http3-quic-production) _2026-08-12 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A Wireshark-free workflow to prove HTTP/3 is actually negotiated, diagnose silent fallback to HTTP/2, and measure real perf impact using DevTools, curl, and logs. ## [Transparent Huge Pages + Postgres: Stop P99 Latency Cliffs \[2026\]](https://www.kunalganglani.com/blog/transparent-huge-pages-postgres-performance) _2026-08-11 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ THP isn’t “free performance” for Postgres. Here are the exact Linux settings to avoid p99 latency cliffs, plus a validation loop and Kubernetes guardrails. ## [Meta Names Grant Recipients for AI Glasses Impact Program in the US](https://www.auganix.org/xr-news-meta-ai-glasses-impact-grants/) _2026-08-11 · Sam Sprigg · Auganix.org_ In XR News What’s the story? Meta has awarded nearly USD $2 million in AI Glasses Impact Grants to 30 organizations across the United States supporting accessibility, education, and workforce ... continue reading Source [Listen](https://www.auganix.org/wp-content/uploads/2026/08/AI-Glasses-Impact-Grants.mp4) ## [Data Privacy in RAG Redaction and Retention \[2026 Playbook\]](https://www.kunalganglani.com/blog/data-privacy-rag-redaction-retention) _2026-08-11 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A practical engineering playbook for data privacy in RAG: what to redact, where privacy leaks happen, default retention periods, and audit trails you can defend in an audit without wrecking debugging. ## [AI Engineering Evals: Regression Gates for Prompts, Tools, RAG \[2026\]](https://www.kunalganglani.com/blog/ai-engineering-evals-gates) _2026-08-10 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Stop letting prompt tweaks and model upgrades silently break production. Here’s a CI-style regression gate system for prompts, tool calling, and RAG with golden sets, schemas, shadow evals, and failure budgets. ## [Live Nation Brings CORTIS and Lollapalooza to Roblox in Music Festival Tycoon](https://www.auganix.org/xr-news-music-festival-tycoon-live-nation-roblox/) _2026-08-10 · Sam Sprigg · Auganix.org_ In XR News What’s the story? Roblox experience Music Festival Tycoon, which lets players build and grow their own music festivals, has added CORTIS as its first featured artist ahead ... continue reading Source ## [Zappar’s Spaces AR Navigation Platform Adds Accessible QR Scanning and Faster Loading](https://www.auganix.org/ar-news-zappar-spaces-indoor-navigation-update/) _2026-08-10 · Sam Sprigg · Auganix.org_ In Augmented Reality News What’s the story? Zappar has announced a major update to its Spaces indoor navigation platform, adding accessibility features, richer landmark content, rebuilt route calculation and faster ... continue reading Source ## [Palladyne AI’s Embodied AI Platform Wins $2.9M Expanded Air Force Contract](https://www.auganix.org/xr-news-palladyne-ai-usaf-contract/) _2026-08-10 · Sam Sprigg · Auganix.org_ In Mixed Reality and Robotics News What’s the story? The U.S. Air Force has added $2.9 million to Palladyne AI’s STRATFI contract, lifting the total value to over $10.6 million. ... continue reading Source ## [AI Agent Observability Logging Schema \[2026\]: OTel + Redaction](https://www.kunalganglani.com/blog/ai-agent-observability-logging-schema) _2026-08-10 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A copy‑paste JSON logging contract for agent runs (spans, tool I/O, cost, retries) plus a minimal OpenTelemetry mapping you can implement in a weekend—without leaking secrets. ## [Deepfake Voice Detection for Call Centers \[2026\]: Deploy It Right](https://www.kunalganglani.com/blog/deepfake-voice-detection-call-centers) _2026-08-09 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A practical 2026 runbook for deploying deepfake voice detection in call centers: where to tap RTP audio, what survives VoIP codecs, latency budgets, and how to handle false positives with an appeals workflow. ## [LLM Latency Benchmark Methodology: Streaming UX Metrics \[2026\]](https://www.kunalganglani.com/blog/llm-latency-benchmark-methodology) _2026-08-09 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A UX-first LLM latency benchmark methodology for streaming chat and agent apps: measure chunk cadence, jitter, tool-call stall time, and end-to-end time-to-usable—not just TTFT. ## [Reproducible Terminal Dev Environment: direnv + mise \[2026\]](https://www.kunalganglani.com/blog/reproducible-terminal-dev-environment) _2026-08-08 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ A repo-first, cross-shell setup for a reproducible terminal dev environment using direnv + mise on macOS, Linux, and WSL—plus secrets patterns and troubleshooting. ## [AI Agent Evaluation Framework 2026: 8 Metrics Beyond Task Success](https://www.kunalganglani.com/blog/ai-agent-evaluation-framework-2026) _2026-08-08 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ If your agent eval is just “did it finish the task?”, you’re flying blind. Here’s a 2026-ready scorecard for tool correctness, recovery, safety, and cost-per-success—plus a regression suite blueprint you can actually run in CI. ## [10 HITL Tool Approval Patterns for AI Agents \[2026\]](https://www.kunalganglani.com/blog/tool-approval-patterns-ai-agents) _2026-08-07 · kunalganglani@gmail.com (Kunal Ganglani) · Kunal Ganglani Blog_ Binary approve/reject prompts don’t scale for AI agents. Here are 10 human-in-the-loop permission patterns plus an incident-response-grade audit log spec you can actually ship.