Blog
Two new public modules extracting the OpenPGP signing and verification model, so you can use it without adopting the whole framework.
A secret scanner failed a merge request over a test key and a documentation PEM that the change did not contain. Scoping a scan properly.
Building on your own framework means finding its gaps as a user rather than an author, and having to file the request against yourself.
The kill-switch answer to AI autonomy does not survive contact with how these systems actually run. Governance is not a button.
A wedding photo culler that contains no machine learning at all, by deliberate choice. Blur, exposure and eyes, done with plain arithmetic.
A tool-failure log dumped a wall of Go stack frames where one line would have done. What a log record owes the person reading it.
Reviewing a scaffolder turned up a command name that quietly conflated two different things. A flag and a setting are not the same object.
FFmpeg in pure Go with no install, no CGO and no disk: a WebAssembly build running over an in-memory filesystem, and why it exists.
An AI repair agent declared success the moment the code compiled. The linter disagreed, and the gap between those two is the whole story.
An audit found that a Cobra option had never been enabled, so the root command hooks had silently not run on any subcommand for months.
signing
First Light
cicd
go-tool-base
Pioneering
Soapbox
krites
rust-tool-base
afmpeg
