April's three pieces are all about what was not built.
What went out
| Date | Track | |
|---|---|---|
| 04-02 | Horizon | Every Server Is an App |
| 04-09 | Build | The Dashcam |
| 04-16 | Field | The Doctor Who Left Diagnosis to People |
The tool list is the surface
The dashcam piece is the centre of the month. The common design is one API returning everything with a permission check in front of the video — and that check disappears the day somebody deletes it. In a rushed deploy, mid-refactor. Everything else keeps working, so nobody notices.
So the video tool was not locked — it was never built. A check is code and code can be deleted; an absent tool has nothing to call.
The clinic flow piece has the same shape. No verdict tool, and if verdict vocabulary tries to reach a response the server throws rather than quietly stripping it. Strip it and it goes back in next time.
This month's finding
The original proposition drew "not exposing" as a way to reduce risk. Building it showed that was half. For a terminal manufacturer this is a reason to sell. Not opening the certified secure area means the screen axis can be added without recertifying. Not safe because it was not built — sellable because it was not built.
Still open
- "An unbuilt capability is unreachable" is what was confirmed; "therefore it is safe" was not proved. Authentication, authorisation and transport security are all outside
Next month
On to how experience compounds, and what has to be the same shape for that to hold.
makemind.dev "Signal" — the 2026-04 close.