Open Source

xtty: opening a second SSH shell without repeating the setup

I'm the developer of xtty, a terminal for macOS. Its focus is the setup work between commands: opening saved hosts, starting another remote shell, a…

I Committed 518,000 Lines in 30 Days. Production Kept 235,000.

Originally published on my blog — read it there with the full context, code and updates . Last week I did something I almost never bother to do: I c…

Why is GitOps so good?

AI-Assisted VoIP Call Center Ops: Claude Hooks & Incident KB

AI-Assisted VoIP Call Center Ops: Claude Hooks & Incident KB Route inbound calls to the right agent queue in real time, auto-resolve carrier cod…

Architectural Deep-Dive: Language Models Learn to Improve Language Models

Breaking Recursive Self-Improvement: How Research World Models Eliminate GPU Bottlenecks Autonomous engineering systems that optimize their own code…

One Password Shut Down a US Fuel Pipeline

In May 2021, Americans were filling plastic bags with gasoline. Panic buying. Lines wrapped around the block. A regional state of emergency declared…

A guard that never fires is the same as a guard that does not work

Every guard has two states: working and green by accident. Both print “OK”. The difference only shows when you force the condition it was supposed t…

n8n-sync — Git-based version control for n8n Community Edition workflows

If you are self-hosting n8n Community Edition, you already know the pain: no built-in version control. Enterprise has Source Control at €667/mo, but…

The Test Wasn't Wrong. It Was Answering an Older Question.

The Test Wasn't Wrong. It Was Answering an Older Question. I shipped a change I had reviewed, simulated, and deployed. An hour later my acceptance s…

🔎 Building IncidentCopilot: Designing a Deterministic Log Correlation Engine

Milestone 4 of IncidentCopilot — an open-source, local-first AI DevOps Incident Copilot 📌 Introduction Logs are plentiful during outages — the chall…

Sent is not confirmed

A send tells you about your side. A read-back tells you about the other side. Most agent failures I have debugged this year live in the gap between…

I built a free, open-source platform with 180+ developer tools and 18 technical guides (Built with Astro)

Hey Dev community! I want to share a project I've been building: Th-Tech. It's a comprehensive, free, and open-source platform for developers. Why I…

Drift Checks in TDK CLI: Fail Fast, Generator Changes, and Catching Hand Edits Before Commit

A drift check answers one question: has someone changed a generated file by hand? TDK runs that check before Tilt starts, so a hand edit stops the s…

Continuous Security Testing for Small Teams: What to Test, How Often, and Who Owns It

Small teams rarely have a security department. They have a few developers, maybe a team lead, and sometimes an MSP that looks after the infrastructu…

Zero Trust, explained without the buzzwords

"Zero Trust" might be the most abused phrase in security. Every vendor slaps it on a box and charges you extra for it. Let me strip the marketing of…

Why Vector RAG Fails AI Agents: Building an Autonomous SRE Swarm with FalkorDB

Large Language Models depend on the context they are given. In the year the usual way to give context has been Vector RAG (embeddings plus cosine si…

LLM access controls and monitoring: where the control belongs in the request path

Access control for LLM applications is usually discussed as a model problem. It is not. It is a request path problem. The model proposes an action,…

Getting Hands‑On with DeepSeek‑v4.1‑Flash‑1017: A DevOps‑Friendly LLM for Real‑World Apps

1. What was released / announced DeepSeek‑v4.1‑Flash‑1017 is the latest open‑source large language model (LLM) from DeepSeek AI, now hosted on Huggi…

Exit Criteria for a Free Model Tier

A free model tier is a lease with an unpublished end date. Signing it is not the mistake. Learning the terms during a production incident is. The us…

A One-Page SOP for a Shared Free AI Bench

A shared free AI bench rarely dies from an empty allowance. It dies from an unowned next step. The developer conversation this week mixed two moods.…

Platform Engineering

Scaling AI in production is not just about making models more powerful — it's about building the infrastructure to serve them reliably at scale. The…

48-Hour Field Notes: Exit Code 137 at Hour 31 Was Not a Bug in My Code

I run long jobs on purpose, because short jobs lie to me in pleasant ways. A loop that finishes in ninety seconds never teaches you what happens whe…

Kapitan generators as supply-chain artifacts

Kapitan's kadet generators are Python packages that turn an inventory into Kubernetes manifests, Terraform JSON or anything else. They are also code…

Automating SSL Renewals in GitHub Actions with acme.sh

Automating SSL Renewals in GitHub Actions with acme.sh When our infrastructure team inherited a legacy deployment pipeline that required manual SSL…

ViciDial LAGGED agents: root cause analysis and debugging

ViciDial LAGGED agents: root cause analysis and debugging Agents stuck in LAGGED status show no calls, drop inbound traffic, and fail to reconnect:…

48-Hour Field Notes: The Batch Worker Vanished and My Re-Run Redid Every Item

Two days ago I started a batch of prompt evaluations, closed the laptop lid, and assumed the free server would keep chewing through the queue while…

Cold Starts, Lost Files, and Green Dots: Five Myths About Using a Free Server as Staging

My demo broke at 9:58 PM. The same URL answered at 9:40. My code did not change in between. That gap is the whole lesson. A free server is a shared,…

The build went green because it stopped checking

A teammate deleted a test file on a Friday. Not on purpose. The suite still passed. The pipeline still went green. Nobody noticed for three weeks. H…

From Paper to Insights: Build Your Own Private Medical RAG with Pinecone, Ollama, and PaddleOCR

Let’s be honest: looking at a blood test result or a medical lab report feels like trying to read ancient hieroglyphics. You see numbers like Albumi…

Runbook Rot: Three Fingerprints of Stale CI Docs and the Check That Catches Each

A runbook is the only document in your repo that gets read at 3 a.m., under adrenaline, by someone who trusts it. When the code is stale you get a b…