Engineering essays from the bench.
War stories, architecture decisions, and the occasional tirade. Written by the engineers who shipped it.
Why We Built Trinetra: Moving Away From Prometheus Complexity
Why we built Trinetra instead of running Prometheus, Grafana and Alertmanager or paying Datadog, what each option really costs, and when Prometheus is still right.
Trinetra vs Netdata for Multi-Node Fleets: An Honest Comparison
Where each one decides to page you, what happens when the central node dies, memory, retention and real yearly cost, from both projects' own docs. Netdata wins on depth; Trinetra on staying quiet and staying up.
Is Your Supabase Data Public? RLS Checks Before Launch
Test whether your Supabase tables are readable with your public key, turn on RLS the right way, close the bypasses, and fix 42501 before October 30.
Trinetra: Server Monitoring That Stays Quiet Until It Matters
Trinetra is one small Go daemon per Linux server: live dashboards, alert rules you can read and Telegram alerts, plus a fleet master with incidents and escalation that never becomes a single point of silence. How it works, and an honest comparison with Netdata, Prometheus, Zabbix, Beszel, Uptime Kuma and Datadog.
Braid: One Download, Every Network You Have
Braid splits one download across Wi-Fi, Ethernet and your phone's 5G at once, hashes every chunk as it lands, and survives a crash without losing the file. Free software for macOS, Windows and Linux, with an Android companion.
wontfit: Find the Element That Breaks Your Mobile Layout
wontfit shows your app at phone widths side by side, names the element that overflows and by how many pixels, and fails CI when a layout breaks.
What It Takes to Run a Canton MainNet Validator
Onboarding approval, SV sponsor and IP allowlist, the Docker Compose node, upgrades, backups, monitoring and traffic, plus a run-or-outsource checklist.
Opening a Repo Is Running Code: GitSpawn and Coding Agents
GitSpawn and Plugin4Shell showed coding agents running repo-supplied code before any prompt. Patch status, a pre-open check script, and fixes for builders.
How to Give AI Agents Access to Tools Securely
Broker credentials, bind tokens to one resource, authorize every call, pin MCP servers and re-approve changed tools. With code and lessons from Deadbugz.
Sandbox to Production: What to Do After an Agent Ships
What to do after an AI agent goes live: pin versions, trace runs, cap spend, add a kill switch, grow evals from failures, and alert on behavior.
