How we merged two overlapping court order trackers, enriched missing fields with Claude Haiku for a few cents, replaced 200 paywalled links with free CourtListener alternatives, and shipped a searchable explorer — all through conversational prompting with Claude Code.
The first malicious MCP server in the wild BCC'd every email to its author. A poisoned WhatsApp connector showed how one approved tool can siphon another connector's data. When a firm wires AI agents into its document system, the plumbing — not the document — is the new attack surface.
The PPP fraud pipeline worked because the SBA released unusually inspectable data. Medicare's public data is fragmented, de-identified, and missing the features detection needs. Here's what exists on GitHub, where it falls short, and what CMS would need to release to make outside healthcare-fraud analysis more practical.