Topic
Security
Authentication, authorization, vulnerability research, CVEs.
7 published pieces
Published work
Stop Scripting CI/CD in Python or Bash! Save Your Memory with Rust Scripts
Why the AI age flips the economics of scripting. Use single-file Rust scripts for deterministic DevSecOps automation with 8.4x speedups and 85 % memory savings.
AI · September 18, 2026My Name Is Jev: Summarizing Dozens of Real-World Use Cases, Benchmarks, and Ecosystem Repositories
Most write-ups of TypeSafe’s System One model (Jev) are launch listicles. We stress-test Jev on 50 adversarial invoice edge cases across six models, analyze confidence calibration, survey the 186 curated ecosystem tools and 1,566 consensus candidates on awesomejev.org, evaluate Teknium’s compaction critique, and outline fine-tuning alternatives.
AI · September 18, 2026Bend 2 and Proof-Blocked AI: What a Law File Actually Buys
Part three of the machine-checked proofs series. Bend 2 moves the kernel-checked loop from mathematics into ordinary code: you declare laws, the AI must prove its changes keep them. We read the site, the paper and the checker, and ran it. The checker held up against every cheat we tried. The laws are still yours to get right, and on launch day nothing but convention guards the file they live in.
AI · September 5, 2026The Practical Value of Machine-Checked Proofs
Fermat’s Last Theorem has zero direct industrial utility. But the pipeline that machine-checked its 13 million lines of Lean code demonstrates an operational verification engine for critical software, cryptographic primitives, and hardware design. Here is where the real economic value lands – and how DIY developers and small teams can leverage it today.
AI · March 15, 2026What Secure AI Development Looks Like in Practice
Not theory, not vendor slides. Just the real questions around control, review, supply chain risk, and operational accountability.
AI · February 20, 2026RDP Authentication Forensics and AI-Assisted Patching of GNOME Remote Desktop 49.0
How agentic AI tooling helped investigate a 3-year-old GNOME Remote Desktop bug, and why adversarial verification of AI output caught four incorrect diagnoses.
AI · February 15, 2026From Filing Tickets to Fixing Problems: AI-Assisted Development of Secure OAuth2 Authentication for Apache Guacamole
How AI-assisted development enabled a security professional to build a secure OAuth2 extension for Apache Guacamole, discovering a CSRF vulnerability in the process.