Search
Posts
The Brand Behind the Plugins: A Survivorship Story
Why the plugin marketplace ran away. Lead with survivorship + the distribution gap, not the repo count. Tier 2 brand piece.
ReadThe Third State: When Your Checkout, Image, and Docker Volume All Disagree
A rebuild succeeded and nothing changed. How Docker named volumes shadow your image, and how to write a deploy smoke check that asserts on the served bytes.
ReadNow-LMS 2.0 and the Email Cutover
A 2.0.0 that is mostly a careful rename plus security headers is exactly what a healthy release looks like.
ReadSplitting Privileges at the CI Boundary
Fork CI privilege separation in GitHub Actions prevents secret exfiltration. Run untrusted fork code and trusted deterministic steps safely.
ReadGood mechanisms are not an architecture until a doctrine names them
You can ship a dozen good mechanisms and still have no architecture. A doctrine names why they cohere and forces every capability to fail closed.
ReadWrong-Mode Green Is Not a Gate
A freshness gate that accepts the wrong mode flag and still exits green trains people to trust a board that cannot see. Pin the argv semantics, not just the script path.
ReadTemporary Is Not a Plan: Fork Discipline for an Adopted LMS
Adopting an open source LMS got us live in days. What keeps a fork from becoming a private product: a named upstream path and a written retirement condition.
ReadDo Not Blindly Restart: Designing a Self-Healing Watchdog That Stays Honest
A burn-in watchdog latched on a phantom io spike. The fix: fail-closed self-healing that restarts an allowlist, latches everything else, and never trusts one sample.
ReadPassing Is Not Validating: A Green Check With No Teeth
A JSON Schema validator passed all 19 checks while validating nothing. How a code review proved it, and the teeth check that fixed it.
ReadA Green Recovery Drill Can Still Be Lying
A recovery drill that passes green can still be lying. Learn four false-pass traps in disaster recovery and backup restore verification.
Read