# Aaron Careaga

> I build systems that have to work. Currently at Snowbound Solutions, building avalanche detection and forecasting systems for places where failure isn't abstract. Previously second engineer and CTO at KITE through its acquisition and transition into Nucla. Also run Kaska, a consulting practice focused on mission-critical systems in harsh environments.

## Interface

This is a public content site. It does not expose a public API, OAuth/OIDC
protected resource, MCP server, A2A service, or commerce checkout on this
domain.

Every page on this domain negotiates to markdown: request with `Accept:
text/markdown`. Direct markdown versions are also published for the homepage
and local writing.

Machine-readable entrypoints:

- robots.txt: https://aaroncareaga.com/robots.txt
- sitemap.xml: https://aaroncareaga.com/sitemap.xml
- Agent Skills: https://aaroncareaga.com/.well-known/agent-skills/index.json
- Security contact: https://aaroncareaga.com/.well-known/security.txt

In-page tools are registered via navigator.modelContext on the homepage.
Content signal: search=yes, ai-input=yes, ai-train=no. Cite freely; don't train.

## Writing

- [Your AI Tools Are the Attack Surface Now](https://aaroncareaga.com/blog/ai-tools-attack-surface): July 2026. AI coding tools didn't create supply-chain risk; they moved the blast radius into developer and build environments.
- [Agents Can Act. That Doesn't Make Them Governable.](https://aaroncareaga.com/blog/agents-can-act): April 2026. Protocols help agents connect. Nothing yet makes them accountable for the work: scope, evidence, approvals, receipts, rollback, and real completion gates.
- [Lessons from Cleaning Up After Confident Coders](https://aaroncareaga.com/blog/confident-coders): May 2025; first published on Medium. A pattern catalog of recurring mistakes that sneak in when ego outruns experience, and the thinking tools to clean them up.
- [Engineering at KITE](https://medium.com/kite-srm/kite-engineering-57c3ccf63243): Scaling engineering through acquisition.

## Work

- [Snowbound Solutions](https://snowboundsolutions.com/): Operational avalanche detection and forecasting systems in harsh conditions.
- [Avalanche.org](https://avalanche.org/): National forecasting platform. 22 of 24 U.S. avalanche centers, 435k users at peak season.
- [Nucla](https://nucla.com): Vendor intelligence for Fortune 500 procurement teams.
- [Slipforms](https://slipforms.ai/): Codex-first Mac app for governed agent runs: scope, gates, review, artifacts, and verifiable slips.
- [AvalancheMap](https://www.avalanchemap.com/): Terrain risk analysis for mountain properties.
- [topo.sh](https://topo.sh): Elevation and terrain data API built on USGS 3DEP.

## Consulting

- [Kaska](https://kaska.app): Consulting practice - mission-critical systems, harsh environments.

## Elsewhere

- Email: aaroncareaga@gmail.com
- [X](https://twitter.com/aaroncareaga)
- [GitHub](https://github.com/acareaga)
- [LinkedIn](https://www.linkedin.com/in/acareaga/)
- [Medium](https://medium.com/@aaroncareaga)
- [SSRN](https://papers.ssrn.com/sol3/cf_dev/AbsByAuth.cfm?per_id=1208248)