Blog
Field notes on OSINT, security checks, SEO, and safer hiring and vendor due diligence.
-
Gas Optimization Race and how to verify gas claims
2026-08-29
Gas Optimization Race shows the same contract idea implemented twice and raced live on-chain. The useful lesson is how to inspect gas claims with public execution evidence, semantic equivalence, and controlled comparisons.
-
ZK KYC Pass Explorer and the engineering of private proof
2026-08-28
ZK KYC Pass Explorer demonstrates a privacy-preserving identity pattern: verify possession of a credential without exposing the underlying identity. The engineering value sits in claim minimization, verifier design, replay resistance, and the places where logs and policy often put identity back into the flow.
-
RWA Tokenization Explorer and the mechanics of gated transfers
2026-08-27
RWA Tokenization Explorer shows the engineering pattern behind ERC-3643-style KYC-gated transfers. The useful lesson is where transfer eligibility lives, how to verify it from contract behavior, and where restricted-token systems often fail.
-
ZK Escrow Explorer and the hard boundary in on-chain disputes
2026-08-26
ZK Escrow Explorer shows the engineering boundary between private Groth16 state transitions and AI-arbitrated disputes. The key questions are what the proof constrains, how arbitration outputs are typed, and where trust assumptions enter the settlement flow.
-
What 1M-token context changes in production AI systems
2026-08-25
A million token context window changes AI system design more than it changes prompts. If you build with long-context models, inspect retrieval precision, prompt assembly, injection resistance, and output validation before you scale usage.
-
When your executable also ships a SQLite database
2026-08-24
A binary which also contains a SQLite database changes how you verify builds, inspect runtime behavior, and manage embedded config. For Go, AI, and blockchain systems, the key work is deterministic extraction, schema discipline, and row-level review of critical data.
-
Why interface design is a security control in blockchain and AI
2026-08-23
A quote highlighted by Simon Willison points to a practical lesson for blockchain and AI teams: developer experience is a security control. Good interfaces, visible state, narrow authority, and failure-first testing reduce costly mistakes.
-
What LLM CLI Releases Teach You About Production AI
2026-08-22
A small LLM CLI release points to a bigger engineering shift. Once model calls move into scripts and services, prompt execution becomes infrastructure, with versioning, contracts, and security boundaries to test.
-
What site: at scale means for AI retrieval systems
2026-08-21
AI search systems are leaning harder on query operators like `site:`. For teams building RAG, assistants, or documentation platforms, this changes how retrieval behaves and how site architecture affects answer quality.
-
Go 1.27: How to assess a release before you upgrade
2026-08-20
Go 1.27 is a prompt to review runtime behavior, standard library boundaries, and build reproducibility in your own services. A safe upgrade depends on benchmarks, contract tests, and staged rollout, not on release-post headlines.