Journal

Straight talk on building and automating.

AI automation guides, vibe coding tutorials, web development pricing, and operator blueprints. No fluff.

InsightsNew

960 Commits Later: What This Architecture Actually Looks Like Today

A wrap-up of what building a real AI agent orchestration platform for three months actually produced, and what would change starting over.

Jul 17, 2026·1 minRead
InsightsNew

One Core, Two Skins: Building Two Audiences From the Same Engine

Sharing one engine between a technical audience and a business-facing audience is a clean idea that took three real rebuilds to get right.

Jul 17, 2026·1 minRead
InsightsNew

Per-Tenant API Key Isolation: What Went Wrong With Shared Keys

A service consolidation surfaced a real key-isolation bug between tenants. Here is what the fix looked like and how to check your own system.

Jul 17, 2026·1 minRead
InsightsNew

The Cost of Splitting a Microservice Too Early (and Folding It Back In)

A feature was split into its own service, then folded back into the monolith days later, after surfacing a real bug along the way.

Jul 17, 2026·1 minRead
InsightsNew

Why We Killed Our Own Bloom Post-Processing Pipeline

Bloom looks incredible in a screen recording. At real-world scale and frame rate, it stopped being worth it.

Jul 17, 2026·1 minRead
InsightsNew

Retrofitting Billing Enforcement Into a Product That Already Shipped Features

Going back to audit which paid features are actually gated, and finding the honest answer is 'not all of them.'

Jul 17, 2026·1 minRead
InsightsNew

Security Audits in Waves: Triaging Findings by Severity Pre-Launch

Treating security as a single pre-launch checklist misses most of what actually needs fixing. Real hardening happens in numbered, re-audited waves.

Jul 17, 2026·1 minRead
InsightsNew

Multi-Tenant SaaS From a Single-User Tool: The Cloud Migration

A tool built for one user on one machine has no isolation requirements. The moment a second tenant shares infrastructure, every assumption needs re-examination.

Jul 17, 2026·1 minRead
InsightsNew

Porting a macOS-First App to Windows: Every Assumption You Didn't Know You Made

Building on one platform first is fine until you ship elsewhere and discover how many small platform-specific calls you made without noticing.

Jul 17, 2026·1 minRead
InsightsNew

We Let Our Agent Create Its Own Tasks. It Created the Same One 40 Times.

A scheduled AI audit found the same issue every run and created a new task for it every time, because nothing told it the task already existed.

Jul 17, 2026·1 minRead
InsightsNew

Building a Tunnel Proxy That's Actually Secure: Allow-Lists, Fail-Closed, JWT Stripping

Exposing a local process to the internet through a tunnel is a specific, well-understood security problem with a specific, well-understood fix.

Jul 17, 2026·1 minRead