# Baize AI > Baize AI is an AI transformation consultancy. It helps companies put AI into operations, engineering, and delivery workflows. Work is remote-first. Baize AI offers four services: 01 · AI transformation consulting: interview each team, rank the workflows to change first, and agree how results will be measured. 02 · Team AI training: role-based sessions; each team leaves with reusable skills for its own tasks. 03 · Forward deployed engineering: remote-first engineers work inside your team and connect agents to CRM, ERP, and HR systems. 04 · Internal tools and product support: custom internal tools, maintained after launch. Contact: contacts@fxai.ai ## Key pages - [Home](https://fxai.ai/en/): Who Baize AI is, the four services, and how to book a first call - [Services](https://fxai.ai/en/services/): Consulting, training, forward deployed engineering, and tools: scope and deliverables - [Method](https://fxai.ai/en/method/): How an engagement runs, from diagnosis to rollout - [About](https://fxai.ai/en/about/): The team and our working standard - [Notes](https://fxai.ai/en/notes/): Notes on putting AI to work in real teams, filterable by topic - [Contact](https://fxai.ai/en/contact/): Book a call by email or the contact form ## Notes - [Agent Console: What to Check Before Your Company Adopts One](https://fxai.ai/en/notes/agent-console-layer-enterprise-checks/): An Agent console is a scheduling and observation layer above coding Agents, with no model of its own. Before adopting one, a company checks four things - which Agents it supports, where session and audit records live, how the server is deployed and which remote channels are open, and whether to use stable or nightly. This note walks through each check using T3 Code. - [After an Agent Model Upgrade, Workflow Results Changed. What Now?](https://fxai.ai/en/notes/agent-model-upgrade-behavior-change/): When a company upgrades an agent's model or investigates a change in production behavior, it first checks the model, prompt, and tool definition versions recorded in the run logs. It then runs regression tests on a locked test set and compares tool call structure. The business process owner and the quality or risk team sign off together on a staged rollout. - [Agent Egress Control: How Wide Must the Allowlist Be for the Agent to Work?](https://fxai.ai/en/notes/agent-network-allowlist-scope/): For agent egress control, the sandbox denies all outbound traffic by default, and a domain allowlist and permitted request methods are configured per task. Separating the dependency install phase from task execution, limiting write methods on broad domains, and blocking private network ranges separately keep agents running while preventing data leaks. - [An Agent Exceeds Its Authorized Scope: Downgrade It or Stop It?](https://fxai.ai/en/notes/agent-scope-drift-runtime-response/): When a company running automated systems finds an agent acting beyond its authorized scope, it needs tiered responses based on impact. A minor read-only overreach can be handled by revoking a single tool permission and running in a downgraded state. High-risk writes or external actions call for an immediate stop and frozen credentials, and the security lead decides on recovery after finding the root cause. - [Choosing an AI Model Vendor: Who Does It Build Products For?](https://fxai.ai/en/notes/ai-vendor-choice-who-they-build-for/): When choosing a model vendor, first ask who the vendor builds products for and whether enterprise business is its core business, then assess vendor stability. If a vendor sells to enterprises only as a backstop for its own compute, it may switch back to consumer business at any time or follow its leader's personal will, and a company should not tie its core operations to it. - [AI Screening for Export Sample Requests: Who Gets Free Samples?](https://fxai.ai/en/notes/b2b-sample-request-ai-qualify/): Exporters that use AI to pre-screen sample requests grade each one by company verification, how specific the inquiry is, past dealings, and target-market fit. AI suggests a free sample, a sample fee or freight collect, or a decline. The sales rep confirms the final plan, samples above a set value need manager approval, and follow-up results are logged. - [AI Scores Customer Service Calls: Who Sets the Deduction Rules?](https://fxai.ai/en/notes/call-qa-ai-scoring-rules/): Customer service teams hand QA scoring of every call to AI. The QA lead and the business lead set the deduction rules together. The system tags each deduction with the transcript quote and timestamp under detailed rules, and agents have an appeal channel. The team runs regular human-and-AI calibration, and scores count toward performance reviews only after human review. - [Claude Code or Codex: Which Tool Gets Which Task](https://fxai.ai/en/notes/claude-code-or-codex-by-task/): Before a team uses AI to write code, it should know what kind of work Claude Code and Codex each suit. Local tasks where a person watches and edits go to the terminal tool. Tasks with clear acceptance checks go to Codex Cloud. Codex can review PRs. Use the two together and keep the rules in one place. - [Codex Skills: How to Install Them and How to Call Them](https://fxai.ai/en/notes/codex-skills-install-and-use/): Codex skills package a task workflow in a standard folder and run in the Codex CLI, the IDE extension, and the desktop app. You can install curated skills with the official command or write them directly into the repo or a local path. You call a skill by name with a symbol, or the model matches it from its description. Teams manage skills through repo version control and a config file. - [Cold Chain Temperature Alarm: Should You Reject the Shipment?](https://fxai.ai/en/notes/cold-chain-temperature-alert-rejection/): When a cold chain temperature alarm fires, logistics companies and cargo owners decide on rejection from the full temperature record, measured surface and core temperatures, packaging condition, and their receiving rules. Unclear cases go to the quality lead, who decides and keeps a record. - [Collections Agents: After How Many Reminders Should Sales Take Over?](https://fxai.ai/en/notes/collections-agent-escalation/): When finance teams use a collections agent to follow up on overdue receivables, it first removes invoices with incomplete internal paperwork or delivery disputes, then sends reminders by the company's aging tiers and contact limits. Key accounts, broken payment promises, requests for discounts, or a move into a higher aging tier send the account to sales and legal. - [A Contract Renewal Agent Flags an Expiry: Should Auto-Renewals Be Held?](https://fxai.ai/en/notes/contract-renewal-agent-auto-renew/): A contract renewal agent identifies the expiry date, the auto-renewal clause, and the notice period, then works back from the last day to give notice and sends alerts. Contracts with auto-renewal clauses must not roll over by default. Before the window closes, the using department and the contract owner confirm whether to renew or renegotiate the price. A written non-renewal notice is reviewed by a person before it is sent. - [A Contract Review Agent Flagged the Risks. Does Legal Still Read Every Clause?](https://fxai.ai/en/notes/contract-review-agent-risk-clauses/): When a company brings in a contract review agent, legal reviews in tiers by contract type and amount. For standard templates, legal checks the risk points and suggested edits the agent flagged. Legal reads non-standard or high-value contracts in full. Regular back-testing guards against missed flags. - [AI Customer Service Knowledge Base Out of Date? How to Retire Old Answers](https://fxai.ai/en/notes/cs-knowledge-base-stale-answers/): When a company runs a knowledge base for AI customer service, it records each entry's owner, effective and expiry dates, and version status. It spots stale knowledge through signals such as handoffs to human agents, repeated follow-up questions, and frontline rewrites. After production retrieval and derived caches are cut off, the entry owner decides whether to retire or replace the entry. - [AI Pre-Fills the Customs Declaration. Who Is Liable for a Wrong HS Code?](https://fxai.ai/en/notes/customs-declaration-ai-hs-code/): When trading and customs brokerage companies use AI to pre-fill customs declarations and suggest HS code classifications, legal liability for the declaration before customs still sits with the consignee or consignor and the customs broker they engage. Internally, companies confirm fields by tier and keep the candidate codes, classification basis, and override records. - [A Delivery Promise Agent Gave the Date. Who Answers When the Order Is Late?](https://fxai.ai/en/notes/delivery-promise-agent-late-order/): In manufacturing and trading companies, a delivery promise agent calculates available-to-promise quantity from live inventory, inbound purchases, and production capacity, and suggests a delivery date. A formal promise goes out only after sales or a planner confirms it. When an order is late, the system snapshot shows whether the cause was bad data, a later plan change, or a person who did not follow the suggestion, and the customer is told early about an adjusted plan. - [Employees Build Their Own AI Tools. Should the Company Still Buy Software?](https://fxai.ai/en/notes/employee-built-ai-tools-vs-buying-software/): After a team builds AI tools that solve specific workflow problems, the company still needs to decide what software to buy. Small tools used only for one internal step are fine to build. Systems that involve many parties, daily customer support, or security protection should still be bought. Management inventories what exists first, draws the line, and stops once a tool works. - [An Onboarding Agent Creates Accounts: How Should Access Follow the Role?](https://fxai.ai/en/notes/employee-onboarding-agent-account-access/): When a company uses an onboarding agent to create email, office software, and business system accounts for new hires, role templates approved by each department with IT and security control the scope. The agent stops at once when information does not match. Anything outside the template, and sensitive access involving money or data, goes to human approval. - [AI Compares BOM Changes: Who Approves the Engineering Change Notice?](https://fxai.ai/en/notes/engineering-change-bom-ai-compare/): Manufacturers hand BOM change comparison to AI, and engineers still check the comparison and the impact list. R&D, process engineering, quality, purchasing, and production co-sign the engineering change notice and set the material cutover point and the disposition plan. AI finds the differences. A person confirms the write to the released version. - [AI for Equipment OEE Analysis: Who Decides the Downtime Cause?](https://fxai.ai/en/notes/equipment-oee-ai-loss-attribution/): In equipment OEE analysis, manufacturers capture each downtime event from controller signals and tiered reason codes. AI suggests the most likely cause from fault codes and context. Operators on the floor confirm it, area supervisors maintain the reason code list, and production engineers verify the attribution hypotheses. - [An AI Agent Edits ERP Master Data: How Do You Trace a Bad Change?](https://fxai.ai/en/notes/erp-master-data-agent-change-trace/): When companies let an agent edit ERP master data, they need strict tracing and controls. The agent logs in with its own account and records the old and new values, the requester, and the source document for every change. High-risk key fields need human approval first, and when a change goes wrong, the audit trail lets the team trace and roll it back quickly. - [When an Expense Claim Agent Rejects a Claim, Who Hears the Appeal?](https://fxai.ai/en/notes/expense-claim-agent-reject-appeal/): When an expense claim agent reviews receipts and line items and rejects a claim, it must cite the specific expense review rule it hit. The company also needs a human second-review appeal channel with a named handler, a response time limit, and a loop that corrects the rules. Every rejection and reversal is logged. - [AI-Generated Export Quotes: Which Date Sets the FX Rate and Freight?](https://fxai.ai/en/notes/export-quotation-ai-validity/): When an export company uses AI to generate quotations, the base exchange rate date and source, the validity of the base ocean or air freight rate, and the quote validity period are all written into the document by preset rules. The sales rep and finance check them before sending. Longer validity or discounts beyond authority go to a supervisor for approval. - [Factory Energy Optimization: Will Production Shift Off-Peak?](https://fxai.ai/en/notes/factory-energy-ai-peak-shifting/): In factory energy optimization, AI can combine real-time production load with time-of-use electricity prices to suggest off-peak operation. Order delivery dates, yield, equipment condition, and shift staffing belong to production and process engineering, so a load-shifting plan must state its equipment and order impact and be confirmed by production planning, the shop floor, and process engineering before it runs. - [A Resident Agent Watches the Line: What Can It Do on Its Own?](https://fxai.ai/en/notes/factory-resident-agent-what-to-handle/): A resident factory agent connects to manufacturing systems to help run the plant, and its autonomous actions need safety tiers. It can fill in missing data and dispatch inspection work orders on its own. Process parameter changes and schedule changes need human confirmation. Emergency stops and safety interlocks stay physically isolated from it, so production stays stable and under control. - [Field Service AI Wants to Upload Customer Device Data. Is That OK?](https://fxai.ai/en/notes/field-service-ai-customer-device-data/): When equipment makers use field service AI to collect run logs and fault photos, they need a clear boundary for data collection. Collection on site follows the service agreement and reads only the sensor and alarm data needed for diagnosis. It strips the customer's recipes and process parameters. Engineers work through compliant, authorized accounts, and backups are cleared on a schedule. - [How to Install Grok Bot on Desktop and Mobile](https://fxai.ai/en/notes/grok-bot-install-desktop-mobile/): Before installing Grok Bot, confirm your plan includes access and your account is not on Privacy Mode (Legacy). On desktop, download the installer for your system and chip architecture and sign in with a Cursor account. On mobile, install from the official app store. Both use the same Bots and the same cloud computer. - [Grok Bot Pricing: Which Plans Include the Bot?](https://fxai.ai/en/notes/grok-bot-pricing-plans/): To assess Grok Bot pricing, first check which plans include Bot access. On The X Subscription, the Premium, Super, and Ultra tiers include Grok Bot, and usage is shared weekly between Grok and Cursor. Past the allowance you can top up with prepaid credits and set a monthly spending cap. - [Grok Bot Routine Not Firing? How to Troubleshoot It](https://fxai.ai/en/notes/grok-bot-routine-not-firing/): When a Routine does not fire, check in a fixed order. First see whether its switch is paused, then confirm the time zone and next run time, and check the external event matching rules and the webhook status code. If it still has not run, check plugin authorization and rate limits. - [Grok Bot vs Grok: Which One Gets Your Repeat Work?](https://fxai.ai/en/notes/grok-bot-vs-grok-app/): The difference between Grok Bot and Grok comes down to whether a task has to keep running in a real environment. Grok is a chat app for instant answers and content generation. Grok Bot has an always-on cloud computer for multi-step automation and scheduled repeat work. Sign-in and usage metering are separate for the two. - [An Employee Q&A Agent Got the Leave Policy Wrong. Who Is Responsible?](https://fxai.ai/en/notes/hr-policy-agent-wrong-answer/): Companies deploy employee Q&A agents to answer attendance and leave policy questions, and the algorithm explains general rules quickly with the clause cited. When a wrong answer leads an employee to take leave by mistake, the company needs a verification and remedy process, a clear line for handing personal balance questions to a person, and regular spot checks and policy updates to head off disputes. - [AI Grades Incoming Material Batches. Who Signs a Concession?](https://fxai.ai/en/notes/incoming-inspection-ai-concession/): Plants bring in AI incoming inspection to detect dimensional and visual defects in materials, and the algorithm quickly sorts batches into accepted and rejected. When an urgent production need calls for a concession release of a rejected batch, the algorithm supplies only measured evidence. Quality, production, purchasing, and the customer sign, which settles accountability and the trace record. - [An Invoicing Agent Issued a Wrong Invoice. Who Approves the Red-Letter Reversal?](https://fxai.ai/en/notes/invoice-issuing-agent-red-reversal/): Companies use invoicing agents to issue fully digitized e-invoices in China, with the algorithm matching sales orders, the contract ledger, and tax details. When an invoice is wrong and needs a red-letter reversal, the algorithm only summarizes the differences and drafts the request. Finance staff approve and submit it within their authority and pass real-person identity verification, which prevents unauthorized actions that create tax risk. - [A Helpdesk Agent Resets Passwords: How Do You Verify Who Is Asking?](https://fxai.ai/en/notes/it-helpdesk-agent-password-reset/): When a company lets a helpdesk agent reset passwords and unbind accounts for employees, it has to verify the person before acting. The program cannot rely on verbal details a coworker could find out. It checks registered devices, the office network, and manager confirmation. Low-risk actions run automatically by rule, high-risk device rebinding goes to human review, and every step is logged. - [Cases From a Legal Research AI: How to Verify Them Before You Cite](https://fxai.ai/en/notes/legal-research-ai-case-check/): When lawyers and in-house counsel use legal research AI to find similar cases and precedents, they cannot paste the model's summaries or case numbers straight into a complaint, a defense brief, or a legal opinion. Every case they plan to cite must be checked against the original text and its later appeal history on an official public platform or a licensed database. - [AI Checks Letter of Credit Documents: How Do You Catch Every Discrepancy?](https://fxai.ai/en/notes/letter-of-credit-ai-discrepancy/): Trading companies hand the first review of letter of credit documents to AI. The system breaks the credit into an itemized checklist, compares the invoice, bill of lading, and packing list against it and against each other, and marks every difference. Documentation clerks use these leads to decide whether to amend or present, and the team replays past rejections on a schedule to find what the system missed. - [AI Trains New Line Operators: Do They Still Need a Mentor?](https://fxai.ai/en/notes/line-operator-training-ai-tutor/): Plants hand part of new line-operator training to an AI system, and the mentor's role stays. The system answers questions about work procedures at any time and tracks weak spots. Mentors focus on correcting motions on the floor, passing on hands-on feel, and enforcing safety. Together they form a workable training split. - [Local Agent Sandboxes: Which Directories Can It Read and Write?](https://fxai.ai/en/notes/local-agent-sandbox-file-access/): Developers who run coding agents locally rely on a local agent sandbox to limit file system access. Write access defaults to the project directory and temp paths. Read access is broader, so credential files need a separate block. Outbound requests pass through a domain allowlist. Before rollout, verify the isolation by running a command the sandbox should block. - [Cargo Damage Claims AI Reviews the Photos. Who Decides the Payout?](https://fxai.ai/en/notes/logistics-claims-ai-damage-evidence/): When logistics companies and shippers use cargo damage claims AI on damaged deliveries, the AI identifies damage and checks contract rules against five standard types of claim evidence. Claims specialists or claims supervisors decide the payout by company-set amount thresholds and exception cases. No amount is promised to the customer before a person confirms it. - [Android Apps on a Mac: 6 Checks Before Installing at Work](https://fxai.ai/en/notes/mac-android-app-enterprise-install-check/): You can run Android apps on a Mac with Mac.apk. It needs macOS 26.4 or later and Apple Silicon, and it has no sandbox. Before approving it, check 6 items: signing and notarization, entitlements, shared folders, rebuild from source, network calls and reporting, and uninstall and rollback. This note also gives our reasons for not installing it and the conditions for a trial. - [LM Studio or Ollama: Which to Use on a Mac](https://fxai.ai/en/notes/mac-lm-studio-or-ollama/): LM Studio and Ollama suit different jobs on a Mac. If a person sits at the screen testing models and quantization levels, install LM Studio first for its graphical interface. If terminal scripts and coding agents need an always-on local API, install Ollama first. The two use different ports and can run together on the same computer. - [How Much Mac mini Memory Do You Need to Run Local LLMs?](https://fxai.ai/en/notes/mac-mini-local-llm-memory/): The memory you choose when buying a Mac mini for local LLMs sets the largest model the machine can hold. Work back from model size. In 4-bit quantization, 16 GB suits models up to about 14B parameters, 32 GB up to about 30B, and 64 GB up to about 70B. Factor in memory bandwidth and multitasking overhead when you buy. - [Multi-Agent Orchestration: A Main Agent Idle 73% of the Time Should Go](https://fxai.ai/en/notes/main-agent-idle-wait-subagents/): In multi-agent orchestration, the main agent sits idle waiting for subagent handoff summaries: 73% of the time on one Terminal-Bench 4.0 task. This note compares Anthropic's single loop with Stanford DeLM's shared log plus task queue, and covers how to choose, how to change, and five common mistakes. - [A Month-End Close Agent Drafted Adjusting Entries. How Do Accountants Review Them?](https://fxai.ai/en/notes/month-end-close-agent-adjusting-entries/): Finance teams use a month-end close agent to draft adjusting entries such as accruals, amortization, and reconciliation differences. The agent only creates suggested drafts with structured support in a review workspace and does not write to the general ledger. Accountants review them in tiers by tolerance band, and entries post through the standard approval flow. - [AI Translates Your Product Catalog: Who Owns a Wrong Spec?](https://fxai.ai/en/notes/multilingual-catalog-ai-translation/): Exporters use AI translation to build multilingual product catalogs, and the main risk is mistranslated technical specs. Before translation, lock a do-not-translate list and spec formats. During translation, run automatic number comparison. A product engineer signs off on the spec tables, and every version stays traceable. - [AI Quoting for Custom Parts: Which Step Needs a Process Engineer's Sign-off?](https://fxai.ai/en/notes/nonstandard-parts-ai-quote-signoff/): Machining and equipment makers can use AI to quote non-standard parts. AI reads material, tolerances, and surface treatment from engineering drawings, matches a process route, and estimates hours and cost. Before the quote goes out, a process engineer must check and sign the route and process card, a lead co-signs large or new-process orders, and sales checks delivery and commercial terms. - [Agent Sandbox Selection: OpenSandbox or sandbox-runtime?](https://fxai.ai/en/notes/opensandbox-vs-sandbox-runtime-selection/): To choose an Agent sandbox, first decide what you are isolating. To limit a coding Agent's reads, writes, and network access on your own machine, use a process-level tool such as sandbox-runtime. To run untrusted code, run batch evals, or serve many users, use a full runtime with separate containers or virtual machines, such as OpenSandbox. - [AI Due Diligence on Overseas Buyers: How Far Can You Trust It?](https://fxai.ai/en/notes/overseas-buyer-due-diligence-ai/): Export teams use buyer due diligence tools to screen prospects. The algorithm pulls together company websites, registration records, and trade history fast. Because it confuses companies with the same name and cites stale data, sales staff verify each source, large deals go to official channels for review, and a manager sets the payment terms. - [Personal Data Agents: How Far Can Customer Data Go?](https://fxai.ai/en/notes/personal-data-agent-minimization/): When a company uses an agent that handles personal data for customer service, it needs clear data access boundaries at each step. The system takes less and reads only required fields. It masks input dynamically, filters fields before external tool calls, and clears and destroys conversation logs on a schedule. A human channel handles customer deletion requests. - [Too Many Predictive Maintenance Alerts: Which Ones Mean Stop the Machine?](https://fxai.ai/en/notes/predictive-maintenance-alert-triage/): After a plant deploys predictive maintenance, the monitoring system often floods the floor with alerts, from many sensors firing on the same fault or from thresholds set too tight. Floor staff cannot answer each one. First merge alerts from the same source, then have equipment, production, maintenance, and safety set grading rules together. People decide whether to stop based on conditions on the floor. - [Scheduling Agents and Rush Orders: How Does the Workshop Manager Approve?](https://fxai.ai/en/notes/production-scheduling-agent-rush-order/): When a manufacturer's scheduling agent handles a rush order, it first freezes the current schedule baseline and recalculates the affected orders in a copy. It lists options and their costs under goals such as on-time delivery or fewer changeovers. The workshop manager, planning, sales, and purchasing co-sign the chosen option before it is released. - [A Purchase Order Agent Places Orders on Its Own. How Should Amounts Be Tiered?](https://fxai.ai/en/notes/purchase-order-agent-approval-tiers/): When a company uses a purchase order agent for routine purchasing, it splits approval authority by amount tiers it sets itself. Low-value orders under a framework agreement go through automatically, mid-tier orders need purchasing manager approval, and high-value orders go to the department head or finance for sign-off. The system also blocks order splitting meant to avoid approval and keeps a full record. - [Qwen3.8 VRAM Requirements: Which Quantization Level for 27B?](https://fxai.ai/en/notes/qwen38-27b-vram-requirements/): Check Qwen3.8-27B VRAM and memory needs against Unsloth's official hardware table: 4-bit needs 16-19 GB, 1-bit to 3-bit need 7-14 GB, and higher-precision levels need 23-56 GB. Pick the quantization level that matches your total memory. - [A Distributor Disputes the Rebate Agent's Numbers. What Now?](https://fxai.ai/en/notes/rebate-agent-distributor-reconciliation/): When brands and manufacturers use a channel rebate agent for distributor rebate reconciliation, they first lock the contract version, sales basis, return offsets, and payout history in one shared workpaper, then trace each disputed item to its source. Changes to amounts, payout releases, and outgoing statements all need approval from sales and finance. - [Customer Service Refund Agents: Which Amounts Need Approval?](https://fxai.ai/en/notes/refund-agent-amount-threshold/): When e-commerce and retail companies launch a customer service refund agent, refund limits are controlled by amount tiers the company sets itself. Small requests that fit the order status and reason rules can go through directly. Requests over the limit, repeated requests, and compensation go to a store manager or finance for approval, and the business system rechecks before execution. - [A Sales Forecast Agent Changed the Quarter. Does the Director Sign Off?](https://fxai.ai/en/notes/sales-forecast-agent-director-signoff/): When a company uses a sales forecast agent in pipeline forecasting, the agent's change to the quarterly forecast is a suggested adjustment. It does not overwrite the number sales submitted or edit the underlying opportunities. It carries the opportunity stages and the reasons a deal may slip, and a sales manager or sales director confirms and signs off. - [A Sales Discount Agent Cuts Prices on Its Own. Who Sets the Floor?](https://fxai.ai/en/notes/sales-quote-agent-discount-floor/): A sales team brings in a discount agent to help with quotes. The sales head and finance set the price floor together. The agent calculates discounts only inside the preset range, and any quote below the floor becomes a special-price request for a person to approve. The team reviews over-limit discounts on a schedule and recalibrates the rules. - [Company Seal Approval Agents: Which Steps Stay With People?](https://fxai.ai/en/notes/seal-approval-agent-human-step/): When a company uses a seal approval agent for electronic seal requests, the agent can check request fields, compare the file against the approved final version, and route approvals. Approving or rejecting, legal review of the official company seal and external commitments, signing-intent authentication, and the actual stamping stay with authorized people. - [AI Inspection at Solar Plants: Who Confirms the Defect Report?](https://fxai.ai/en/notes/solar-plant-ai-inspection-defects/): Large solar plants use drone infrared scans and vision algorithms to find anomalies, and the system quickly produces a list of suspected hot spots and damaged modules. O&M engineers verify the algorithm's screening report and route the work orders. For warranty claims, qualified specialists retest on site, so quality and contract performance can be traced. - [AI Revises the Work Instruction: Who Signs Off the New SOP Version?](https://fxai.ai/en/notes/sop-work-instruction-ai-revision/): When manufacturers use an AI work instruction tool to help revise process documents, the AI compares drawings, process cards, the current instruction, and past nonconformance records and assembles a revision package. Authorized staff still author, review, approve, and release the SOP version under the controlled document process. - [AI Sets Spare Parts Safety Stock. Who Owns a Line Stop From a Stockout?](https://fxai.ai/en/notes/spare-parts-ai-safety-stock/): When manufacturers use algorithms or AI to calculate spare parts safety stock, the model outputs a suggested level and its basis, and the business and maintenance teams own the final number. Criticality ratings, service levels, and stock reductions need approval from authorized owners. After a stockout stops the line, the review traces criticality, data, lead time, and approval to assign responsibility. - [A Scheduling Agent Drafts the Rota: How Much Can Managers Change?](https://fxai.ai/en/notes/store-scheduling-agent-manager-edits/): Retail chains use a store scheduling agent to produce staff rotas, and store managers keep some room to adjust them on the floor. Small same-role tweaks and shift swaps for leave can be made directly. Changes that create overtime, long runs of consecutive workdays, or broken rest intervals are blocked by the system and sent to a supervisor for approval. The change records feed a review of the rules. - [Stripe Hong Kong Individual Account: Who Can Open One Without a Company?](https://fxai.ai/en/notes/stripe-hk-individual-account-global-payments/): The rule that you can open a Stripe Hong Kong individual account without a company holds only for Hong Kong residents with an HKID. A merchant with no HKID but a Business Registration Certificate registers a sole proprietorship account. A mainland China seller with neither cannot open one through the individual route, and can consider a company account or another payment method. - [Supply Chain Agents Propose Stock Transfers. How Do Planners Approve?](https://fxai.ai/en/notes/supply-chain-agent-exception-review/): When a company transfers stock between warehouses and stores to cover shortages, a supply chain agent reads each location's inventory and sales velocity and generates options. Write actions such as creating a transfer order stop at an approval screen. Planners, regional managers, or warehouse and distribution leads approve by amount limits and lines of responsibility. - [A Dispatch Agent Switches Carriers: Do You Need to Tell the Customer?](https://fxai.ai/en/notes/transport-dispatch-agent-carrier-switch/): When the planned fleet rejects a load, runs short of trucks, or is expected to arrive late, a transport dispatch agent at a logistics company or shipper can match a backup fleet and build a replacement plan. Whether to notify the customer in advance or get written consent depends on the contract terms, the type of goods, and the freight cost difference rules. - [Travel Booking Agents: Who Stops Over-Policy Hotel Bookings?](https://fxai.ai/en/notes/travel-booking-agent-policy-limit/): When a travel booking agent books hotels for employees, it first matches the travel policy by subsidiary, department, job grade, and destination city. Over-policy bookings are blocked or sent to the direct manager for approval by preset rules. The employee confirms the reason for the overage and any personally paid amount. - [AI Vendor Numbers Are Self-Reported. How Do You Check Them?](https://fxai.ai/en/notes/vendor-ai-claims-verification/): When companies evaluate AI vendors for procurement, they should not take throughput multiples or delivery timelines in marketing material at face value. Self-reported metrics often lack a common baseline and hardware spec. Procurement and technical teams should ask for the test load and the hardware and software setup, run a small test with the company's real use cases, and write the metric definitions into the contract. - [AI Plans Picking Waves: Which Numbers Should Supervisors Watch?](https://fxai.ai/en/notes/warehouse-picking-ai-wave-planning/): When a warehouse uses picking AI to batch orders and assign pick paths, floor management cannot rely on the algorithm's theoretical score. Supervisors should focus on actual results they can check on the spot: orders not shipped before cutoff, picker waiting and walking, stockout rework, and backlog at packing stations. Then they step in to find the bottleneck. - [Can a Computer-Use Agent Safely Operate Your Legacy ERP?](https://fxai.ai/en/notes/agent-legacy-desktop-automation/): Computer-use agents can click through legacy ERP clients with no API. Let them query and save drafts; keep posting and master data edits behind human approval. - [How to Run a Private Codex Gateway for Your Company on Official API Keys](https://fxai.ai/en/notes/ai-coding-compute-sourcing/): Run a private Codex gateway on official API keys: deploy LiteLLM with Docker Compose behind HTTPS, issue one key per employee with budgets, and log usage. - [AI Data Queries Return Two Sales Figures: Which Metric Definition Do You Trust?](https://fxai.ai/en/notes/ai-data-query-metric-definitions/): When natural-language data queries return two different sales figures, the fix is a governed metric dictionary the model must check before it writes SQL. - [AI Resume Screening: Should a Human Review the Candidates the Agent Rejects?](https://fxai.ai/en/notes/ai-resume-screening-human-review/): A recruiting agent speeds up resume screening, but rejected candidates should not be archived unseen. Set up borderline spot checks, appeals, and audit logs. - [AI Safety Inspection Flags a Hazard: Who Signs Off on the Fix?](https://fxai.ai/en/notes/ai-safety-inspection-hazard-fix/): Factories and construction sites use AI safety inspection to capture on-site hazards. The algorithm captures risk images. A safety officer verifies, grades, and assigns each case. The responsible team fixes it by the deadline, and the officer closes it after an on-site recheck. - [Who Owns a Missed Defect in AI Visual Inspection, and How Much Manual Checking Should Stay?](https://fxai.ai/en/notes/ai-visual-inspection-spot-check/): When AI visual inspection lets a defect through, saved images and logs decide who is liable. How to split model and inspector duties and tune manual spot checks. - [When an AI Agent Drafts Your Bid, Who Guards Against Disqualification?](https://fxai.ai/en/notes/bid-agent-tender-response/): Companies use bid agents to help prepare tender responses. One mistake on a mandatory clause disqualifies the bid. The agent lists disqualification risks and drafts responses. Commercial and technical staff check each item against the tender documents. People approve the price, the original credentials, and the signed submission. - [How to Record Lead Source When AI Sorts WhatsApp and Email Inquiries](https://fxai.ai/en/notes/export-inquiry-whatsapp-email-attribution/): When AI triages B2B inquiries from WhatsApp, email, and web forms, the lead source field needs fixed rules. Five steps keep channel attribution accurate. - [AI Equipment Fault Diagnosis: Getting Veteran Technicians' Know-How into Work Orders](https://fxai.ai/en/notes/maintenance-work-order-ai-diagnosis/): Manufacturers can hand first-pass fault diagnosis to AI. The lasting gain is logging veteran technicians' verified fixes in work orders as searchable knowledge. - [How Detailed Should a Procurement Agent's Supplier Shortlist Reasons Be?](https://fxai.ai/en/notes/procurement-agent-supplier-shortlist/): A procurement agent's supplier shortlist needs reasons buyers can verify and auditors can trace, tied to certificate dates, report numbers, and delivery records. - [AI Flags an SPC Anomaly: Who Decides Whether to Stop the Line?](https://fxai.ai/en/notes/spc-anomaly-ai-line-stop/): Plants hand process data to AI for SPC anomaly detection. When parameters drift, the stop-the-line decision needs a clear split between system and people. The system reads data continuously and suggests causes. Shift leads and quality engineers respond by preset tiers, and people own the stop decision and the restart check. - [Agent Authentication: Whose Permissions Apply When Calling Systems for Employees?](https://fxai.ai/en/notes/agent-acting-on-behalf-of-user/): Agent authentication: carry employee and agent IDs on every call, and grant only the overlap of gateway and employee rights to stop shared-account abuse. - [How to Write a B2B Landing Page for AI Agent Buyers](https://fxai.ai/en/notes/agent-buyer-b2b-landing-page/): AI agents now read vendor pages, check specs, compare prices, and send inquiries for B2B buyers. Humans still sign off. What a landing page needs for each reader. - [Agent Evaluation: How Many Runs per Task Are Enough?](https://fxai.ai/en/notes/agent-eval-suite-pass-rate-variance/): Agent evaluation: rerun fixed real tasks, report pass rate, cost per run, latency and variance, and list failures. One run cannot justify launch. - [AI Agent Security Governance Must Come Before Scaling](https://fxai.ai/en/notes/agent-governance-before-scale/): AI agent security governance: Deloitte finds 23% of firms use agents at least moderately, 74% expected in two years, only 21% rate governance mature. - [Who Owns an AI Agent When the Employee Who Built It Leaves?](https://fxai.ai/en/notes/agent-owner-when-employee-leaves/): Agents on shared workflows belong to the process owner. When the builder leaves, swap credentials, check triggers, clear private memory; if unowned, freeze it. - [Your AI Agent Pilot Works. What Does It Need Before Production?](https://fxai.ai/en/notes/agent-pilot-to-production-checklist/): Agent pilots run on clean data with engineers watching. Production brings messy data, cross-system writes, and real consequences. Five checks before you scale. - [AI Agent Permissions: Reading Email Is OK. Does Sending Need Approval?](https://fxai.ai/en/notes/agent-read-mail-vs-calendar-send/): AI agent permissions: relax approval for mail search and summaries; require approval for sends and calendar edits until a permission table exists. - [AI Agent Rollback: How to Undo a Bad Action and Who Is Accountable](https://fxai.ai/en/notes/agent-rollback-and-accountability/): An AI agent took a wrong action. Stop it and revoke credentials in hour one, roll back by action type, replay the action log, and assign accountability by role. - [Agent Test Environment: Use Synthetic Data Before Connecting a CRM?](https://fxai.ai/en/notes/agent-sandbox-test-vs-prod-data/): Agent testing: run agents in a mock company with mock APIs and MCP endpoints before CRM access, then retest with real data in staging before launch. - [Agent Management Starts With an Inventory: Who Runs Employee-Built Agents?](https://fxai.ai/en/notes/agent-sprawl-inventory/): Agent management starts with an inventory: purpose, owner, systems, credentials, triggers, last run. Tier by risk and disable unowned agents. - [Agent Safety Guardrails: When to Stop an Unattended Run](https://fxai.ai/en/notes/agent-stop-conditions-decision-log/): Agent safety guardrails: a completion check plus caps on steps, tokens, time, repeat calls and error streaks. Log which limit fired and what is open. - [Multi-Agent Security: Can Agents Follow Forwarded Instructions Directly?](https://fxai.ai/en/notes/agent-to-agent-trust-boundary/): Multi-agent security: handoffs may carry malicious content. Verify the originator, limit actions, block internal addresses, approve risky writes. - [Agent Tool Call Auto-Approval: Which Calls to Allow or Block](https://fxai.ai/en/notes/agent-tool-call-auto-approval-rules/): Agent tool call approval in three layers: code boundary checks, rule-based auto-approval, human review. Judge the arguments, not the model, and log it. - [Agent Permission Management: How to Set Tool Access Levels and What to Grant First](https://fxai.ai/en/notes/agent-tool-permission-ladder/): Agent permission management by impact: reads first, then drafts and capped writes. Humans approve external actions, payments and irreversible steps. - [How to Measure AI Agent Value After Rollout: 4 Metrics Beyond Usage](https://fxai.ai/en/notes/agent-value-work-finished-metrics/): Call counts and active users don't show what an AI agent delivers. Track cycle time, rework rate, tool-switching cost, and agent overlap against team baselines. - [AI Customer Service Auto-Close: Why Tickets Still Need Human Review](https://fxai.ai/en/notes/ai-cs-auto-close-vs-human-ticket-review/): An AI bot marking a chat resolved does not clear the ticket. How to split auto-close from human ticket review, as China's GB/T 47746-2026 standard does. - [AI Customer Service Compliance: Who Owns What the Bot Promises?](https://fxai.ai/en/notes/ai-cs-can-reply-vs-who-owns-liability/): China's GB/T 47746-2026 took effect Sept 1, 2026. AI agents may answer order questions; refunds, discounts, and compensation need human or formal sign-off. - [Is OpenAI Retracing Dropbox's Path? AI Monetization Starts With Who Pays](https://fxai.ai/en/notes/ai-monetization-dropbox-lesson/): Pricing a consumer AI app starts with who pays. Ben Thompson says OpenAI is retracing Dropbox's path, building ad tracking and enterprise products at once. - [AI Native vs. AI-Enhanced: Does Your System Still Work Without the AI?](https://fxai.ai/en/notes/ai-native-vs-ai-enhanced/): Remove the AI from an AI-enhanced system and it still runs, only slower. Remove it from an AI Native system and nothing is left. One test to tell them apart. - [How to Set an Enterprise AI Strategy: Amazon, Apple, and Microsoft's Three Bets](https://fxai.ai/en/notes/ai-strategy-first-customer/): Start an AI strategy by picking your role. Amazon is its own first customer, Apple owns the entry point and buys models, Microsoft builds the middle layer. - [Can an Annual IT Budget Handle Usage-Based AI Pricing?](https://fxai.ai/en/notes/ai-usage-pricing-budget/): Microsoft 365 E7 is $99 per user per month, with agent overage billed in Copilot Credits. Usage pricing needs monthly decisions; most budgets are set yearly. - [Choosing Enterprise AI Use Cases: Start With Work You Can Verify on the Spot](https://fxai.ai/en/notes/ai-verifiable-work-first/): Code and math can be checked instantly; long-cycle work cannot. Rank enterprise AI use cases by feedback loop length. Digital ads already run a closed loop. - [AI Video Ads: Producing More vs. Passing Brand Review](https://fxai.ai/en/notes/ai-video-ads-vs-brand-review/): Models can make dozens of AI video ads a day; fewer pass brand and platform review. China's labeling rules, Google's AI ad labels, and a pre-scale review gate. - [AI Outbound Calling vs. Human Telesales: Which Steps of a Lead List Go to Each?](https://fxai.ai/en/notes/ai-voice-outbound-vs-human-telesales/): Split one lead list by task when buying AI outbound calling. AI handles bulk reach, screening, and standard Q&A. Humans handle objections, pricing, and closing. - [What Should a Legal Ledger Track for AI-Generated Ad Creatives?](https://fxai.ai/en/notes/aigc-ad-assets-vs-legal-ledger/): China's AI content labeling rules took effect 2025-09-01. An ad legal ledger needs source, generation process, and license fields, plus who logs each one. - [Company-Wide AI Training Is Done. Why Haven't Workflows Changed?](https://fxai.ai/en/notes/all-hands-ai-training-workflow-unchanged/): McKinsey's 2025 survey: 88% of organizations use AI regularly, yet most haven't embedded it in workflows. After AI training, redesign one real workflow first. - [How to Write Answer-First Content That Answer Engines Can Quote](https://fxai.ai/en/notes/answer-first-for-answer-engines/): Answer engines often quote the first paragraph under a question-style H2. Write the full answer in the first sentence, then the reasons and exceptions after it. - [AP Invoice Agents That Also Pay: Which Controls Can't Be Skipped?](https://fxai.ai/en/notes/ap-invoice-agent-payment-control/): An AP agent that runs from invoice matching to payment needs match records, call-back checks on bank changes, duplicate checks, limits, batch review, and recon. - [How to Write B2B Comparison Pages That AI Assistants Cite](https://fxai.ai/en/notes/b2b-comparison-page-ai-citation/): Siege Media data on 116 B2B sites: X vs Y pages correlate most with AI referrals. Lead with a verdict, a decision-axis table, fair trade-offs, stable names. - [Should You Paste a Contract into ChatGPT? Redact It First](https://fxai.ai/en/notes/chatgpt-contract-paste-vs-redact/): CISA's acting director uploaded a For Official Use Only contract to public ChatGPT. Consumer plans may train on inputs. Redact names, amounts, and seals first. - [How to Get ChatGPT and Perplexity to Cite Your Website](https://fxai.ai/en/notes/chatgpt-perplexity-cite-your-site/): To get cited by ChatGPT and Perplexity, allow OAI-SearchBot, PerplexityBot, and Perplexity-User, then give key pages a short answer that crawlers can extract. - [What Does It Take to Make Codex Part of Your Team's Dev Workflow?](https://fxai.ai/en/notes/codex-into-real-workflow/): Moving Codex from one engineer's side tool into a team's development process means settling four issues - task scope, verification, ownership, and lessons. - [Codex Subagent Models: Keep Judgment on the Main Thread, Send Repeat Work to Cheaper Tiers](https://fxai.ai/en/notes/codex-subagent-model-tiers/): How to assign GPT-6.1 Sol, GPT-6 Astra, and GPT-6 Luna to Codex subagents by role, which setting wins, and which reasoning levels each model supports. - [Why Coding Agent Spend Doesn't Reconcile With Company Books](https://fxai.ai/en/notes/coding-agent-spend-audit-on-gateway/): Codex and Claude Code spend on personal keys won't match finance. Who reconciles, which log fields to keep, and why only gateway-issued credentials work. - [Which CRM Outbound Agent Emails Need Human Approval Before Sending?](https://fxai.ai/en/notes/crm-outbound-agent-send-approval/): First touches, pricing, key accounts, and unclear context go to a human. Routine follow-ups send by rule, with checks on frequency, opt-outs, and approval logs. - [Works Locally, Fails in Production? The Last Mile of Deployment](https://fxai.ai/en/notes/deploy-last-mile/): AI writes a site faster, but getting it live and stable still takes engineering discipline. A review of one real Cloudflare Pages launch and how we debugged it. - [How to Deploy a Website to Cloudflare Pages for Free in Four Steps](https://fxai.ai/en/notes/deploy-website-to-cloudflare/): Connect a GitHub repo, set the build command, and add a custom domain to deploy a static site to Cloudflare Pages for free, with global CDN and free HTTPS. - [How Should a Small Team Design Its First AI Coding Workflow?](https://fxai.ai/en/notes/design-first-ai-dev-workflow/): Move a small team from ad hoc AI use to a dev process where AI takes part in requirements, coding, testing, and review, with written rules everyone follows. - [Engineering Guardrails for AI Coding: From Writing Code to Constraining It](https://fxai.ai/en/notes/engineering-guardrails-for-ai/): AI coding amplifies the engineering discipline you already have. Five guardrails keep output stable - behavior oracles, types, fast tests, traces, refactors. - [Why Should an Enterprise AI Pilot Start With One Department?](https://fxai.ai/en/notes/enterprise-ai-pilot-vs-accounts-for-all/): Run an enterprise AI pilot in one department on one scored workflow with written go/stop criteria. Giving every employee an AI account first is not a pilot. - [Enterprise Context Engineering: Making Company Knowledge Usable by AI Agents](https://fxai.ai/en/notes/enterprise-context-engineering/): AI agents stall in production when company knowledge conflicts or goes stale. Make context reliable, executable, and auditable, one workflow at a time. - [GEO for B2B Export Websites: How to Attribute AI-Sourced Inquiries](https://fxai.ai/en/notes/export-site-geo-lead-attribution/): Track AI inquiries on a B2B export site in three places: a GA4 AI channel (the floor), hidden form fields, and self-reported source. Tag WhatsApp and email too. - [From Coder to Agent Orchestrator: How AI Changes a Developer's Job](https://fxai.ai/en/notes/from-coder-to-orchestrator/): AI handles throughput and humans handle judgment. How developer work moves from writing code to system design, agent orchestration, guardrails, and review. - [AI Agent Memory Architecture: Markdown Is the Source of Truth, the Database Is a Disposable Cache](https://fxai.ai/en/notes/gbrain-markdown-truth-source/): GBrain, Garry Tan's open-source agent memory system, keeps Markdown in Git as the only source of truth and treats its database as a rebuildable index. - [Which GEO Metrics Should You Track?](https://fxai.ai/en/notes/geo-metrics-to-watch/): Track GEO in three layers (mention rate, citation rate, recommendation quality), check GA4 and Search Console for outcomes, and sample answers repeatedly. - [Graph Engineering vs Loop Engineering: Graphs Sit on Top of Loops](https://fxai.ai/en/notes/graph-engineering-is-not-loop-engineering/): Graph Engineering sits one layer above Loop Engineering: a loop decides when one agent checks its work and stops; a graph decides which loop runs first. - [Rolling Out Grok Bot at Work? Settle Access and Audit Settings First](https://fxai.ai/en/notes/grok-bot-enterprise-access-audit/): Before enabling Grok Bot company-wide, decide who gets access, how approvals are enforced, and what the Audit Log and Action Recording each actually capture. - [Do Grok Bots Share Files? Isolating Bots on One Cloud Computer](https://fxai.ai/en/notes/grok-bot-shared-computer-isolation/): All Grok Bots on one Cursor account share one cloud computer, files and logins included. Each Bot's screen is a work surface, not a security boundary. - [Grok Bot vs ChatGPT: A Cloud Teammate or Another Chat Window?](https://fxai.ai/en/notes/grok-bot-vs-chatgpt-cloud-teammate/): Since Aug 26, Grok Bot is in Cursor Pro, SuperGrok, and Cursor Teams. Unlike ChatGPT, it takes a task and keeps working on a cloud computer after you log off. - [Brand Monitoring on X with Grok Bot: What the Daily Digest Should Say and When to Escalate](https://fxai.ai/en/notes/grok-bot-x-brand-monitoring-digest/): Hand X brand monitoring to a Bot. Each digest item gets a link, why it matters, and whether a person must decide. Write escalation rules before it starts. - [From Idea to Product: How to Design an End-to-End AI Delivery Path](https://fxai.ai/en/notes/idea-to-product-delivery/): A delivery roadmap that takes an AI idea to a working product, with acceptance criteria at every step. Baize AI designs the path; your team builds the product. - [AI Agents in IT Change Review: Which Steps Still Need a Human Sign-Off?](https://fxai.ai/en/notes/it-change-management-agent-signoff/): Agents can check IT change requests against configs, runbooks, and schedules. Release approval, change windows, and rollback owners still need human sign-off. - [How to Write a Useful llms.txt File](https://fxai.ai/en/notes/llms-txt-how-to-write-useful/): llms.txt is a Markdown index at your site root (llmstxt.org v2, 2026). What to list, how to order links, how it differs from robots.txt, and how to test it. - [MCP Security Risks: Which 4 Items Should You Review Before Connecting?](https://fxai.ai/en/notes/mcp-server-security-review/): MCP security risks: before connecting a third-party MCP server, check its run-as account, input paths, authentication, maintenance and key rotation. - [Robot Imitation Learning: Who Still Writes the Motion Script?](https://fxai.ai/en/notes/robot-video-imitation-vs-motion-script/): BeyondMimic tracks human motion on a real humanoid, from cartwheels to sprints. Waypoints, joystick control, and obstacle avoidance still need human-written costs. - [Fine-Tuning vs. RAG: Connect the Enterprise Knowledge Base First](https://fxai.ai/en/notes/vertical-model-finetune-vs-enterprise-kb/): Fine-tuning a vertical model on weekly-changing facts bakes in stale data. Connect an enterprise knowledge base (RAG) first, then fine-tune for tone and format. - [When Should a Voice Sales AI Agent Hand a Call to a Human?](https://fxai.ai/en/notes/voice-sales-agent-human-handoff/): A voice sales AI agent cannot take back what it says on a live call. Six handoff triggers, four facts to pass to the rep, and how to audit call recordings. - [What Is AEO, and How Is It Different from Search Ranking?](https://fxai.ai/en/notes/what-is-aeo-vs-search-ranking/): A top search ranking does not mean AI Overviews, ChatGPT, or Perplexity will cite you. AEO tracks citations in AI answers. The missing step is the answer block. - [What Is Loop Engineering? Make AI Check Its Work Before It Delivers](https://fxai.ai/en/notes/what-is-loop-engineering/): Loop Engineering makes AI check its work before it delivers: plan, execute, observe, correct, repeat. Covers the three loops and the templates they leave. - [What Does a Secure LLM API Gateway Solve?](https://fxai.ai/en/notes/what-llm-gateway-solves/): An LLM API gateway gives all of a company's AI calls one entry point for authentication, routing, rate limiting, audit, model fallback, and cost logs. - [Why Companies Shouldn't Just Buy Individual AI Accounts](https://fxai.ai/en/notes/why-not-just-buy-ai-accounts/): When every employee buys their own AI account, nobody can see who uses which model or what data leaves. Companies need one trusted relay or gateway instead. - [Zero-Click Searches Are Rising. Do You Still Need SEO?](https://fxai.ai/en/notes/zero-click-search-still-need-seo/): About 68% of US Google searches ended without a click in early 2026. SEO still matters, but brand, local, and transactional KPIs should replace raw traffic. - [Third-Party LLM Router Security: Why Cheap Proxies Put Agent Credentials at Risk](https://fxai.ai/en/notes/third-party-llm-router-security/): A practical guide to third-party LLM router risk, malicious model output, Agent Full Access, credential theft, sandboxing, and self-managed LLM gateways. - [What Is Grok Bot? An AI Agent Guide to Persistent Teammates](https://fxai.ai/en/notes/grok-bot-persistent-ai-teammates/): What is Grok Bot? Learn how xAI's persistent AI agent uses a cloud computer, real Grok Bot use cases, Skills, Routines, Group Chat, and security approvals. - [GLM 5.3 API for Codex, DeepSeek Harness, and Oh My Pi](https://fxai.ai/en/notes/baize-open-model-api/): GLM 5.3 is now available on Baize API. Configure the OpenAI-compatible API for Codex, DeepSeek Harness, and Oh My Pi. New accounts receive $10 in starter credit. - [Run Qwen3.8-27B Locally on Mac with Unsloth](https://fxai.ai/en/notes/qwen38-mac-unsloth/): Pick an Unsloth Dynamic GGUF from Apple Silicon unified memory, then run Qwen3.8-27B with Desktop, Studio, or llama.cpp. On 32GB Macs, use UD-Q4_K_XL (~17.9GB). ## Optional - [RSS feed](https://fxai.ai/en/rss.xml): Updates to the English notes - [Sitemap](https://fxai.ai/sitemap-index.xml): Index of every crawlable page - [Chinese site](https://fxai.ai/llms.txt): Chinese index, with every note in Chinese