Jason Soroko

Senior Fellow, Sectigo

[Jason Soroko @jasonsoroko]

@omarsar0 @dair_ai I used it immediately and saw great results.

[Jason Soroko @jasonsoroko]

Wow. What a week. It's starting to feel like the models have enough training to be useful without so much babysitting, and the babysitting is starting have higher payoff. I have a feeling that the upcoming Gemini and Grok updates are going to be important too.

[Jason Soroko @jasonsoroko]

@addyosmani This works.

[Jason Soroko @jasonsoroko]

@patloeber Gemini 3.6 Flash is Snappy fast. Useful for getting tasks done. I don’t expect frontier intelligence. I want a model to get tasks done, search, give solid responses. Benchmarks show it below where I experienced it. Can’t wait for 3.5 Pro

[Jason Soroko @jasonsoroko]

@amasad @sama Utterly agreed

[Jason Soroko @jasonsoroko]

@SpaceXAI Very token efficient

[Jason Soroko @jasonsoroko]

I wonder how long it will take Anthropic to embed the same harness engineering as Archon.

[Jason Soroko @jasonsoroko]

Congrats to Rory. What a Masters

[Jason Soroko @jasonsoroko]

The true cost of security is the ongoing discipline required to counter this natural sprawl. To protect our infrastructure, we must stop assuming the vault automatically solves the problem. We have to start designing workflows where the secure path is the default path of least resistance.

[Jason Soroko @jasonsoroko]

Static API key management is a fight against gravity.
We often fear the dramatic breach when it comes to static API keys. We worry about compromised servers or exposed storage buckets. The mundane reality is far worse because it is entirely invisible. A secret does not spill just once. It undergoes a quiet, constant cascade across our systems.

[Jason Soroko @jasonsoroko]

Secrets have entropy. Not in the cryptographic sense, but in the thermodynamic one. Left unmanaged, the natural state of an API key is to diffuse and multiply. It starts as one value in one place. Soon it lives in a plaintext environment file. Then it resides in a clipboard manager, a cloud-synced desktop folder, and a terminal shell history. Eventually, it makes its way into team chat histories, developer undo buffers, and AI agent context windows.

[Jason Soroko @jasonsoroko]

The shortcut of pasting a static key into a local file is gravity. It requires no effort. Setting up secure routing requires escape velocity. Every time a team takes the shortcut, the blast radius of that credential grows exponentially.

[Jason Soroko @jasonsoroko]

Centralized key management is exactly like a refrigerator. It works perfectly to preserve what is inside, but only as long as you keep supplying it with energy and actively choosing to put your perishables inside.

[Jason Soroko @jasonsoroko]

Centralized secrets management is our active fight against this thermodynamic tendency. We deploy sophisticated vaults to contain these credentials, but the reality is that the vault itself is never the hard part. The hard part is making every single operational path flow through it.

[Jason Soroko @jasonsoroko]

This process is spontaneous and requires zero energy. You cannot unshare a key that was pasted into a group channel six months ago any more than you can unshuffle a deck of cards

[Jason Soroko @jasonsoroko]

https://t.co/qgncz0PWm7

[Jason Soroko @jasonsoroko]

https://t.co/dXpZoAfbHH

[Jason Soroko @jasonsoroko]

https://t.co/8vzxB4Pa3y

[Jason Soroko @jasonsoroko]

The open model ecosystem is production-ready. Not "almost."

I processed 8,400+ papers in one session at parity or better quality than the premium stack.

You're probably paying for assumptions you haven't tested.

[Jason Soroko @jasonsoroko]

I re-parsed 423 academic papers with 3 different tools.The cheapest one produced the most content.Thread. 👇

[Jason Soroko @jasonsoroko]

Cost before: $150-300/month variable (OpenAI + LlamaParse). Cost after: ~$45/month predictable (Ollama $20 + Mistral pay-per-use).
Better quality. Higher reliability. Lower cost.