Tech Blog

35 articles

AI Collaboration4

Beyond standard OBD — preparing to read SAM, EIS and ESP

Part 3 of "AI-assisted OBD diagnostics". SAM, EIS and ESP have not yet been read on this vehicle: what is finished is the read software and its offline verification, built by keeping the capability of the OBDLink EX separate from vehicle-specific diagnostic definitions.

Zero DTCs does not end the diagnosis — reading the first log

Part 2 of "AI-assisted OBD diagnostics". In the first log from a W204 C63 AMG, standard OBD stored and pending DTCs were zero and permanent DTCs were not acquired. We separate what was queried from the conditions it was measured under, and set out what the values do and do not tell us.

Starting OBD diagnostics with AI — beginning with the record

Part 1 of a series using AI to build OBD capture software for a 2009 Mercedes-Benz W204 C63 AMG that will not start, letting measured logs decide the next step. Covers how work was split between people and AI, why we began with standard OBD, and how raw logs are kept with their conditions.

Humans do physical, AI does logical — a record of splitting a production cluster expansion with an AI agent

A field record of splitting a production node addition with an AI agent — where the AI paid off, what it caught, the human calls that prevented an incident, and the AI’s own mistakes.

LLM Hallucination Audit Implementation

// BASTION Technical Explanation2026-06-13LLM Hallucination Audit ImplementationCross-checking the numbers AI

The more beautiful the design, the more we doubt it with real data — BASTION’s verification discipline before going to production

Before putting automated control into production infrastructure, we refute our own hypotheses with real data — BASTION's verification discipline.

Design based on the premise of “not trusting Agents” in a DMZ environment vulnerable to compromise

Explains BASTION's DMZ Agent design, which assumes the Agent itself may be compromised: AI-SLOG validation of Agent events against raw logs from a separate pathway, Agent permissions that exclude unblocking, heartbeat freeze and 24-hour automatic block expiration.

Mechanism of Multi-Layer Correlation Campaign Detection

How BASTION's multi-layer correlation campaign detection overlays multi-device detections per IP across five layers and time to reveal attack scenarios single-device logs miss. Covers the coherence function, deterministic, explainable threshold checks and subnet/ASN grouping.

The Story of Local LLM Fabricating Monitoring Report Numbers and Countermeasures

2026.04 / Tech Blog / BASTION Local LLM Fabricated Numerical Values in Monitoring Reports, and How We Fixed It

We built a mechanism to detect attacks invisible to individual systems through cross-system log correlation

2026.04 / Tech Blog / BASTION We Built a System to Detect Attacks Invisible in Individual Systems Through Cros

Implementing an AI Active Firewall on a Web Server

2026.04 / Tech Blog / BASTIONImplementing an AI Active Firewall on Web ServersWe implemented a system where a

Graduating from Slack Approval Gates to Fully Automated Blocking of Attack Source IPs

2026.04 / Tech Blog / BASTION Graduating from Slack Approval Gates to Fully Automated Attack Source IP Blockin

AI detects attack → Slack approval → automatic firewall block setup

2026.04 / Tech Blog / BASTION AI detects attack → Approve on Slack → Auto-block added to firewall We added "au

We built a system where AI automatically detects device types and starts monitoring just by pointing syslog to it

2026.04 / Tech Blog / BASTIONJust point syslog and AI automatically determines device type to start monitoring

A Story of AI Log Monitoring Detecting “Account Lockout Caused by a Hung PC”

2026.04 / Tech Blog / BASTION AI Log Monitoring Detected "Account Lock Caused by a Hung-up PC" BASTION's Windo

Building a System for Automated Infrastructure Log Analysis with Local LLM

2026.04 / Tech Blog / BASTION Building an Automated Infrastructure Log Analysis System with Local LLM AI autom

Lightweight Zero Trust Operations Model Implementation Guide

※This article is a compilation of discussions and experiences within our organization based on general securit

The AI Agent Told Its Own Operation “No” — AI Guardrails and Three-Layer Governance, a Record of Two DB-Migration Blocks

An AI agent's guardrail blocked its own dangerous operations twice before execution during a DB migration. A three-layer governance model from a real case.

Ten Pitfalls Hit With plink, PowerShell 5.1, and SQL Server 2022 — Entrusting Hands-On Windows Work to an AI Agent (SSH / Encoding / T-SQL)

Ten pitfalls from automating Windows/SQL Server with an AI agent on real machines: plink host-key pinning, CP932/BOM, cmd quoting, and GO-splitting.

Automating the Preprocessing of an Oracle 19c → SQL Server 2022 Migration With AI — a “Not a Single Row of Real Data” Claude Code Field Record

Oracle 19c to SQL Server 2022 migration preprocessing run by an AI agent (Claude Code) without real data: three control principles and zero-error verification.

Implementation Record: Balancing Accuracy and Determinism with Qwen2.5-14B + GPUStack

Explains why BASTION chose a local LLM (Qwen2.5-14B on GPUStack) over cloud LLM APIs. The LLM only handles tasks like log summaries and reports, while severity and blocking decisions are left to deterministic logic. Also covers enforced JSON output and low temperature.

Tech Blog

AI Collaboration4

Beyond standard OBD — preparing to read SAM, EIS and ESP

Zero DTCs does not end the diagnosis — reading the first log

Starting OBD diagnostics with AI — beginning with the record

Humans do physical, AI does logical — a record of splitting a production cluster expansion with an AI agent

AI Security Ops13

LLM Hallucination Audit Implementation

The more beautiful the design, the more we doubt it with real data — BASTION’s verification discipline before going to production

Design based on the premise of “not trusting Agents” in a DMZ environment vulnerable to compromise

Mechanism of Multi-Layer Correlation Campaign Detection

The Story of Local LLM Fabricating Monitoring Report Numbers and Countermeasures

We built a mechanism to detect attacks invisible to individual systems through cross-system log correlation

Implementing an AI Active Firewall on a Web Server

Graduating from Slack Approval Gates to Fully Automated Blocking of Attack Source IPs

AI detects attack → Slack approval → automatic firewall block setup

We built a system where AI automatically detects device types and starts monitoring just by pointing syslog to it

A Story of AI Log Monitoring Detecting “Account Lockout Caused by a Hung PC”

Building a System for Automated Infrastructure Log Analysis with Local LLM

Lightweight Zero Trust Operations Model Implementation Guide

Database Migration3

The AI Agent Told Its Own Operation “No” — AI Guardrails and Three-Layer Governance, a Record of Two DB-Migration Blocks

Ten Pitfalls Hit With plink, PowerShell 5.1, and SQL Server 2022 — Entrusting Hands-On Windows Work to an AI Agent (SSH / Encoding / T-SQL)

Automating the Preprocessing of an Oracle 19c → SQL Server 2022 Migration With AI — a “Not a Single Row of Real Data” Claude Code Field Record

GPU & LLM Infrastructure8

Implementation Record: Balancing Accuracy and Determinism with Qwen2.5-14B + GPUStack

The approach and pitfalls when upgrading Dify from v1.9.2 to v1.13.3

Steps to Connect Bestnet Cloud and GPU-VPS via 10G Private Network and Implement a GPUStack Cluster

Migration Story: GPUStack from v0.7.1 to v2.1.1

Installing NVIDIA Driver and CUDA 12.9 for Tesla V100 on Ubuntu 24.04 VM in Proxmox VE

Resolving the issue where pipeline_parallel=2 crashes on V100

GPUStack v2.1.1: Resolving All Multi-Node Inference Startup Issues

Installing NVIDIA Driver and CUDA on Rocky Linux 9.3

Monitoring & Automation3

We tried migrating PRTG network device monitoring definitions to Zabbix using Claude Code [Continued]

Migrating PRTG UPS Monitoring Definitions to Zabbix in 30 Minutes Using Claude Code

Setting Up Redmine on BESTNET-CLOUD

Tools & Experiments4

I Tried Installing OpenClaw on Ubuntu 24.04

I Tried Natively Installing OpenClaw on Windows 11

Trying It in a Deprecated Environment: Installing OpenClaw on Windows Server 2019

The Story of Turning a Team into a “Pseudo-BMI”

Services

AI Solutions

Resources