I write about extraction infrastructure, adversarial data pipelines, and local-first software with Rust and Python.
A machine-wide pre-commit hook that only activates in repositories which declare themselves in-scope, and a pre-push gate that dispatches to each repository's own full verification entry point.
How a bespoke CachyOS workstation is described declaratively with chezmoi: three installation layers, why language toolchains stay out of the distro package manager, and how checksum-triggered lifecycle hooks keep the machine reproducible.
How a static journal added an offline-first visual verification harness: Playwright driving the host's system Chromium through Bun, with no browser downloads, screenshots routed to a local directory for multimodal inspection, and clamp-based typography that preserves the mobile heading hierarchy.