Search
Posts
Splitting Privileges at the CI Boundary
Fork CI privilege separation in GitHub Actions prevents secret exfiltration. Run untrusted fork code and trusted deterministic steps safely.
ReadGood mechanisms are not an architecture until a doctrine names them
You can ship a dozen good mechanisms and still have no architecture. A doctrine names why they cohere and forces every capability to fail closed.
ReadWrong-Mode Green Is Not a Gate
A freshness gate that accepts the wrong mode flag and still exits green trains people to trust a board that cannot see. Pin the argv semantics, not just the script path.
ReadTemporary Is Not a Plan: Fork Discipline for an Adopted LMS
Adopting an open source LMS got us live in days. What keeps a fork from becoming a private product: a named upstream path and a written retirement condition.
ReadDo Not Blindly Restart: Designing a Self-Healing Watchdog That Stays Honest
A burn-in watchdog latched on a phantom io spike. The fix: fail-closed self-healing that restarts an allowlist, latches everything else, and never trusts one sample.
ReadPassing Is Not Validating: A Green Check With No Teeth
A JSON Schema validator passed all 19 checks while validating nothing. How a code review proved it, and the teeth check that fixed it.
ReadA Green Recovery Drill Can Still Be Lying
A recovery drill that passes green can still be lying. Learn four false-pass traps in disaster recovery and backup restore verification.
ReadLet the Model Judge. Make the Code Decide.
A production writing pipeline rebuilt around one rule: the language model owns judgment, deterministic code owns the gates and the audit trail.
ReadCopying Files Is Not Installing
A marketplace install copies a plugin's files into place but never runs its installer. Here is how that bricked local mode and the dependency-free bootstrap that fixed it.
ReadProducer Fallback: When Claude Hits the Weekly Limit, the Pipeline Still Ships
A weekly LLM limit is a producer outage, not a reason to miss the daily post. Grok fallback + land path kept startaitools shipping.
Read