Fifty-four posts across twelve topic areas
The SOC tooling layer: credential exposure, security-automation architecture, alert triage, social engineering, and where vendor pricing distorts design.
- 2026-06-18The human attack surface
- 2026-06-09A compromised node will attest that it's healthy
- 2026-06-05The four levers of influence
- 2026-05-29The real decision is upstream
- 2026-05-28The password is in another process's memory
- 2026-05-26Monitoring is not understanding
- 2026-05-21The syslog you can't get back
- 2026-04-02Adaptive WAF rate caps
- 2026-02-05LLM-as-a-judge for alert triage
- 2025-04-22The SOAR anti-pattern tax
What it means to run untrusted workloads and LLM agents safely: sandbox boundaries, isolation dimensions, network egress, model auditability, the limits of human oversight, and the gap between deployment speed and containment.
- 2026-06-17Human in the loop is theater
- 2026-06-07The Linux isolation stack in fourteen working demos
- 2026-06-06Why you can't audit an AI model the way you audit code
- 2026-06-06Confining an agent takes more than a scheduler
- 2026-05-29A microVM is not a sandbox
- 2026-05-23Agent memory is an attack surface
Foundation models, LLM post-training, retrieval, and the sovereign agent built on top of them.
- 2026-06-27You cannot shortcut a mind
- 2026-05-24What Zoya is, and why it's built from scratch
- 2026-05-23Web-reading tools for a sovereign agent
- 2026-02-23ThreatFM: a unified telemetry embedding
- 2026-02-13Scaling LLM post-training
- 2026-01-28Cross-source incident search
Caching, metadata validation, semantic layers, and event spines, the plumbing underneath everything else.
- 2026-04-06Interval-aware caching for Druid
- 2026-02-06The data canary
- 2026-01-15DataJunction
- 2026-01-08One audit-event spine
Small VMs, instruction sets, GPU shaders, and close-to-metal work you can read every line of in an afternoon.
- 2026-06-18Heuristics are a loan against correctness
- 2026-05-29Software you can hold in your head
- 2026-05-21Conway on the GPU
- 2026-05-21Conway in ambient mode
- 2026-05-21Labs background settings
- 2026-04-27What balanced ternary buys, in one instruction
- 2026-04-19An LC-3 toolchain in Zig 0.16
- 2026-01-22JDK Vector API for recommendations
Consensus protocols, scheduler design, replication, and the distributed primitives underneath modern infrastructure.
How the work itself gets done, and how to think about it: legibility and its limits, building trustworthy systems from untrustworthy parts, intent over specs, briefs that outlive tasks, and habits that compound.
- 2026-06-27Measurability beat alignment
- 2026-06-25The corporate lasagna
- 2026-06-22Scarcity used to be free
- 2026-06-19A thousand agents, no sergeants
- 2026-06-18Use a model you can't trust
- 2026-06-17Seeing like a dashboard
- 2026-06-09Who Tests the AI’s Tests?
- 2026-05-29The Buddy System
- 2026-05-28Intent-driven development
- 2026-05-25Why consistency isn't enough
- 2026-04-19Specs with subscribers
Ads, rent, funding, and fees: who pays for software and for expertise, what a rent-free alternative takes, why data-driven markets commodify, how demand-pulled marketplaces drive innovation, why organizations cut instead of create, and who carries the consequence when an agent acts.
- 2026-07-23Bad systems beat good engineers
- 2026-06-17Plausible deniability didn't die, it learned to say "the agent did it"
- 2026-06-06AI as layoffs, not opportunity
- 2026-06-05Innovation when you can't pick winners
- 2026-06-04The value finance can't see
- 2026-06-02Why data-driven firms converge
- 2026-05-30How experts sell differently
- 2026-05-29Who pays for the patient's app
- 2026-05-29How to fund the rent-free alternative
- 2026-02-17Follow the rent: from ads to a co-op
Telemetry-free architecture, data minimisation, local observability, and the difference between a policy that says "we don't collect" and an architecture that cannot collect.
- 2026-06-06No telemetry means no code to collect it
The operational reality of running your own infrastructure: what breaks, what it costs in time, when it makes sense, and the minimum posture before "self-hosted" means anything.
- 2026-06-06The operational cost of no rent
Network-layer controls, egress policy, isolation primitives, and the protocol decisions that shape what software can and cannot do once it is running.
- 2026-06-06The case for an egress allowlist
Notes about the blog itself and the tools underneath it, the layout, the server, the choices behind how this site is built.
- 2026-04-21Publish the log, not the article
- 2026-04-20Markdown is too lossy for design docs
- 2026-04-18Two servers, same shape: servo in Bun
- 2026-04-17What is servo, and what's a servo app
- 2026-04-16H2 Labs: an iteration log