Blog
An OpenTofu state bucket that defends itself against corruption, deletion and its own operator, using lockfiles and prevent_destroy.
A lowest-common-denominator AI interface throws away what each provider is good at. When to route through an abstraction and when to drop below it.
Go funnels errors through a handler. In Rust, diagnostics carry their own code and help and propagate on their own, so the funnel disappears.
An AWS bootstrap module that does exactly three things, and writes down what it deliberately does not do. Scope as a design decision.
Runtime feature flags decide which commands are reachable on a given run. Cargo features decide what is compiled in at all. Do not confuse them.
forbid(unsafe_code) is absolute, which is a problem when a dependency emits a link_section the lint counts as unsafe. Where the line ends up.
Why every shipping crate uses forbid(unsafe_code) rather than deny, which any module inside it can quietly override from the inside.
Hot-reloading configuration: watch the file, re-read it, swap it in atomically and notify observers, without restarting a long-running service.
A checksum hosted beside your download stops accidents, not a compromised platform. Why the signing key has to live somewhere you control.
A vulnerability scanner is a one-day yes or no. Running cargo-deny as a standing policy gate instead, with waivers that expire on a date.
Pioneering
rust-tool-base
go-tool-base
