A notes agent reaching through a managed gateway to a real filing cabinet bolted to a database

Building an Agent on Bedrock AgentCore, Part 4: The Notes Were Always Ephemeral

Last time the agent learned to remember you: durable conversations, your preferences trailing you across sessions. It knows you like terse summaries. It knows the Q3 doc is in the shared drive. It does not have the Q3 doc. It has never had your notes. For three posts add_note has been dropping them into a Python list that lives in RAM and dies with the process, like a goldfish keeping a diary. The agent remembers the conversation about your notes. The notes themselves were a rumor it was too polite to correct. ...

June 30, 2026 · 10 min · Ken Kitts
An agent harness reaching across a network to a remote rack of tools behind a locked door

Building an AI Agent from Scratch, Part 4: Remote Tools, or Trusting a Knife You Didn't Forge

In Part 2 we forged our own knives: a calculator that parses an AST instead of calling eval, file tools locked in a sandbox, every input frisked by code we wrote and could actually read. We trusted those tools because we built them. This post is about handing the model a knife from a stranger’s kitchen, sight unseen, and saying “go nuts.” That’s the Model Context Protocol, or MCP. It lets a tool live on someone else’s server, behind a login, and still show up on the model’s menu like it grew there. And here’s the part that should make the back of your neck prickle: ...

June 12, 2026 · 11 min · Ken Kitts