Blog
Half my CI jobs ran for no reason on every merge request. Skipping them with rules:changes, and why that is trickier than the manual suggests.
rust-tool-base needed go-tool-base's control over which commands an AI agent may call. Closing the gap meant doing the opposite of what Go did.
An agent is a model in a loop with tools it can really call and results it can really see. Taking the ReAct pattern apart in go-tool-base.
Recording a voice clone in a wardrobe, what it sounds like when the accent slips, and the line I drew about where my synthetic voice may go.
If the platform hosting your code also hands out the key that verifies it, the signature proves nothing. Where to publish a public key instead.
TikTok's OAuth flow wants you to copy a code out of a web page and paste it into a terminal. What it took to give keryx a native flow instead.
A soft launch for Scout, an AI co-dungeon-master for long tabletop campaigns, and why it will never speak to the players.
Opening a public marketplace for agent workflows meant publishing an attack surface, and then having to defend it from my own convenience.
Launching sigillum, a standalone artefact signing and verification CLI, and the Rust signing problem that made it necessary.
Where a signing key lives is the most provider-specific decision in the whole business, so the framework deliberately refuses to have an opinion.
cicd
Pioneering
rust-tool-base
go-tool-base
Soapbox
signing
keryx
First Light
