Garden

A digital garden — notes published while still growing, not polished before planting.

seedling

A starting point: unverified, unstructured, likely to change.

budding

Worked through once, with sources. Still open to revision.

evergreen

Settled and maintained.

• Acting on a Human's Behalf budding

  A service that calls a backend for a person needs two credentials — and the first must never become the second.

  #security#identity
• Clean-Room Reimplementation With an Agent budding

  The model has read the competitor. That makes the clean room a process, not a promise — spec in, nothing else in, a diff tool at the door.

  #licensing#ai#self-hosting
• Generated Code Has No Owner, and That's Not the Problem seedling

  Purely machine-generated code is nobody's property. The risk with teeth runs the other way — what the machine may have carried in.

  #licensing#ai
• Indemnity Is Not Ownership seedling

  A vendor offering to defend you over its model's output is not claiming that output. Read the clause next to it.

  #licensing#ai
• The kauditd Hold Queue Incident budding

  Three rounds of diagnosis, two plausible root causes that were both wrong, and the one counter shape that settled it.

  #infra#security#self-hosting
• The Linux Audit Subsystem budding

  What has to be true for an audit record to actually arrive — kauditd, its two delivery paths, and the queue nobody shows you.

  #infra#security
• MCP Server Authorization budding

  Whether an MCP server needs OAuth at all depends on its transport — and over stdio the spec says it shouldn't have any.

  #security#identity
• Questions to Ask an IdP seedling

  Which identity provider?

  #security#identity#self-hosting
• Web Analytics seedling

  Picking a self-hosted, honestly-described analytics tool for this site.

  #privacy#self-hosting
• WebAuthn Credentials Are Domain-Bound budding

  The relying-party ID gets chosen at first deploy, usually without anyone noticing, and it binds harder than the database does.

  #security#identity