docs(blog): publish SAM daily engineering journal

[simple-agent-manager]

Summary

Publishes SAM’s 2026-09-29 technical journal entry about encrypted custom MCP headers and safe tool-call labels in VM resource history. The post explains both flows for readers who are new to SAM, with a Mermaid diagram where the MCP path crosses system boundaries.

Validation

• pnpm --filter @simple-agent-manager/www lint
• pnpm --filter @simple-agent-manager/www typecheck
• pnpm --filter @simple-agent-manager/www build

Staging Verification

N/A: docs-only. This PR adds static Markdown content under apps/www/src/content/blog/; no runtime code or deployable behavior changes.

Specialist Review Evidence

• All local reviewers completed and findings addressed before merge
• If any reviewer did NOT complete: needs-human-review label added and merge deferred to human

Reviewer	Status	Outcome
task-completion-validator	PASS	Research, checklist, diff, and all acceptance criteria reconcile; no UI or multi-resource selection path applies.
doc-sync-validator	PASS	Content claims match the merged MCP-header and resource-history changes; links resolve to merged PRs.

CodeRabbit Review Evidence

• coderabbit-review label applied after local review and documentation-only validation
• All CodeRabbit findings implemented or explicitly reviewed and closed/resolved
• Incremental CodeRabbit review completed after final pushed fixes, or no fixes were needed
• Latest CodeRabbit review has no unresolved feedback

CodeRabbit Notes

The coderabbit-review label was applied once. The trusted workflow completed successfully, and CodeRabbit reported no review because the bot identity is not eligible for automatic review. No CodeRabbit findings exist.

Agent Preflight

• Preflight completed before code changes

Classification

• public-surface-change
• docs-sync-change
• external-api-change
• cross-component-change
• business-logic-change
• security-sensitive-change
• ui-change
• infra-change

External References

N/A: this post documents already merged repository changes. Source material was the local commit history, task conversations, and PRs #2186 and #2183.

Codebase Impact Analysis

The only changed public surface is apps/www/src/content/blog/sams-journal-connecting-tools-safely.md. Its technical claims were checked against apps/api/src/services/mcp-connection-headers.ts, packages/vm-agent/internal/acp/mcp_servers.go, packages/vm-agent/internal/resourcehistory/collector.go, and apps/www/src/content/docs/docs/guides/mcp-servers.md.

Documentation & Specs

Added apps/www/src/content/blog/sams-journal-connecting-tools-safely.md and archived the delivery record at tasks/archive/2026-09-29-sam-daily-engineering-journal.md.

Constitution & Risk Check

Checked Principles III, IV, and VI. The post is a public change-history record, uses simple explanations for a non-specialist reader, and was validated by the marketing-site lint, typecheck, and production build. Technical claims are limited to the two already-merged PRs; no credentials or tool inputs are reproduced.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: raphaeltm/simple-agent-manager/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 290f183b-b4ab-4001-9f06-7d2b5f260214

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[raphaeltm]

@coderabbitai review

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud