writing · field notes · receipts
Essays, post-mortems, and the occasional receipt — written from the trenches, cooled by research. Infrastructure reality, AI practice, and what actually happens when the marketing meets the product.
SBOM tells you what shipped. EDR tells you what ran. Bumblebee answers a third question — which developer laptops have the bad lockfile entry on disk, right now. A walkthrough of the CLI, the scan profiles, and a worked incident-response example.
read the piece →Some AI workflows are bounded by a hard rule: sensitive data cannot leave on-prem infrastructure. That constraint isn't a problem to design around — it's a clarifying force. The architecture pattern, the cuts we made yesterday, and why the boundary is good for you.
read the piece →Headless automation is easy to sell and easy to build. The hard, valuable work is the kind that still needs a person in the middle — and that's where the real intelligence accumulates.
read the piece →A lot of "AI agent" products you'll see this year are one of a handful of diagrams on a whiteboard. A plain-English walk through the common building blocks.
read the piece →A platform that sells itself on "no lock-in" has spent two and a half years letting three GitHub issues about bulk export rot on the vine. Here are the receipts.
read the piece →// more inbound. Subscribe by booking a conversation — I'll send the next one by email.