ARCHIVE · EVERY PIECE
Writing
Hand-written pieces about things that actually happened: a defect found, the measurement that exposed it, what changed afterwards. The canonical home is here, the copies live elsewhere.
A permissive robots.txt is not a licence
I audited ten sources my scraper had been reading for a month. Two passed. The one that let every crawler in granted me nothing, and the one that blocked bots would have been fine.
My quality gate wasn't strict. It was dead.
An LLM-as-a-judge gate failed every content PR for weeks. It looked like a high bar. It was a 400 from the API, and the error message only named half the problem.
From text-JSON parsing to Claude tool use in JobSearch
I had five functions whose only job was repairing JSON that Claude had just written. One PR deleted them all, and the surprise came after launch.
I made my portfolio site audit its own security headers, live, in front of you
A portfolio card that runs a same-origin HEAD request to audit its own security headers live, and why the real CSP has to live in two places.
Thirteen PRs in one afternoon, and the boring rule that made it possible
I planned six changes and expected to finish two. Six hours later thirteen were live, and the thing that kept it upright was not the speed.