Hero Image
Sitadel: What You Owe People Once a Distro Ships Your Tool

Eight years, 179 commits, and packaged in Kali and BlackArch — which I did not plan and which changed what I am allowed to break. On finding quality over detection coverage, a hang that only existed in a real terminal, and the cleanup nobody asks for.

Tuesday, August 18, 2026 | 7 minutes Read
Hero Image
Watari: A Security Control That Was Never On

Watari’s headline claim is tenant isolation enforced by PostgreSQL Row-Level Security. The policies had been in the schema for months and had never once taken effect. Turning them on took four changes that had to land together — and none of them was writing a policy.

Tuesday, August 11, 2026 | 9 minutes Read
Hero Image
Secrust: When Adding Cores Made It Slower

A single-process Sigma correlation engine in Rust. Eight optimisation passes took the realistic workload up 301% — and then four threads made it 23% slower than two. Why that happened, what I shipped as the default, and the things I decided not to build.

Tuesday, August 4, 2026 | 9 minutes Read