Noesis / Field notes
Useful thinking.
Applied.
Practical perspectives on digital products, connected systems and growth. Written to help you decide what to do next.
Web estate security
Magento and Adobe Commerce: CISA says attackers are using a flaw Adobe fixed in July
CISA says attackers are using a flaw in Adobe Commerce and Magento that Adobe fixed on 14 July. Control of an administrator’s account could reach prices, orders and customer records. Ask whoever runs your store whether it has the July update, and whether an older Open Source store has any fix.
Read field noteWeb estate security
PHP2Shell: what two PHP flaws mean for your WordPress, WooCommerce, Magento or Drupal site
Two flaws in PHP, the language behind WordPress, WooCommerce, Magento and Drupal, let outsiders take over a website's server, and attackers are using them. Customer data, checkout and connected systems are within reach. Ask whoever runs your site to update this week.
Read field note
Commerce systems
What must an AI shopping agent do before placing an order?
Shopify offers browser and server paths for agent checkout. Test current totals, buyer permission and recovery before allowing an agent to submit an order.
Read field note
Commerce systems
Can you add Shopify commerce without rebuilding your website?
Hydrogen 2026-10 can bring Shopify commerce into an existing JavaScript site. Test one buying path and its connected systems before deciding to rebuild.
Read field noteAgent delivery
Can you test your agent without changing live records?
A separate test URL does not prove that connected systems are separate. Check where every action goes before a business team tries an agent.
Read field noteSystems governance
Does your delivery partner need access to every live service?
Cloudflare now supports access to individual Workers. Use the change to reduce broad permissions without blocking delivery.
Read field noteCommerce systems
Can your team explain a market-specific price?
A new Shopify audit trail can help diagnose contextual product prices. Test its scope before treating it as a full pricing record.
Read field noteSystems reliability
Will the failure details still be there when you investigate?
Cloudflare’s new workflow retention default is a prompt to match diagnostic history to your operating review cycle.
Read field noteCommerce systems
One product. Several barcodes. Check every connected system.
Shopify’s multiple-barcode announcement is a reason to test product data across your store, ERP and marketplaces—not to rush a live migration.
Read field noteAI discovery
Make your business easier for AI to understand.
Clear evidence and useful pages matter more than a new layer of AI-search jargon. Here is where an operating business should begin.
Read field noteCustomer experience
The human handoff is part of your AI product.
An agent that can answer questions but cannot hand over cleanly leaves the customer doing the integration work.
Read field noteDigital partnerships
What a retained digital team should actually own.
A retainer should buy continuity of thinking and delivery—not an indefinite list of tickets.
Read field noteYour next move
What should
work better?
Bring us the business problem.
We’ll work out the next step together.