Live dispatch · Oct 2026

Start AI Tools with Intent Solutions

The implementation journal of Intent Solutions. Follow the work of turning AI capability into reliable production systems: the builds, evaluations, failures, and operating lessons your team can use for itself.

0
Posts published
0
Cross-post platforms
0
Monthly retrospectives
Latest

Recent posts

All posts →
Technical Deep-Dive

Docker Container Security Hardening: What Unit Tests Miss

Docker container security hardening, from one staging deploy. Five controls that passed their own tests, and the review question behind each.

Read
DevOps

Two releases in four minutes: why release.yml fires twice

Why startaitools saw v1.33.31 and v1.33.32 land four minutes apart: the post+assets cadence is two pushes to master, so release.yml stamps each one.

Read
DevOps

Bash 2>/dev/null Hides stderr, Not the Exit Code

Bash 2>/dev/null hides the message but not the exit code. Under set -euo pipefail, the suppressed exit still aborts a substitution, killing first deploys.

Read
Technical Deep-Dive

Tag a Tested SHA, Not a Bot Commit

A bot push on a protected branch wedges a CI release in a tag-already-exists loop. Move the version bump into a PR and tag an already-CI-green SHA on main.

Read
Technical Deep-Dive

Move the deploy runner onto the tailnet, skip Tailscale OIDC

Move the GitHub Actions deploy runner onto the tailnet, skip the ephemeral Tailscale OIDC handshake. Add join-tailnet and send-revision toggles.

Read
DevOps

When a Third-Party CI Credential Expires, the Deploy Fallback Has to Already Live on the VPS

A VPS-resident deploy script plus a SHA-pin guard turns any third-party CI credential expiry into a one-line SSH recovery.

Read
DevOps

When git describe Traps Your CI Semver Bump, Look Up the Highest Existing Tag Instead

A bot's [skip ci] version-bump commit that was rejected by branch protection creates an annotated tag outside the branch's ancestry. git describe keeps returning the older reachable tag, the bump recomputes a version that was already tagged, and the release job fails with `tag already exists` on every push. Use `git tag --list 'v*' --sort=-v:refname | head -n1` (highest existing tag, not git describe) and the version stays monotonic forever.

Read

Let's build something that ships to production

Intent Solutions is an applied AI engineering company. We build with your team, test against your actual work, and transfer the knowledge needed to operate and evolve the system. This journal shares the methods and lessons that can be made public.

No commitment required. We respond within 24 hours.