https://bluesquadron.dev/tags/open-source/Recent content in Open Source on BlueSquadron — Security engineering for AI systemsHugo -- gohugo.ioen-usflorent.batard@gmail.com (Florent Batard)florent.batard@gmail.com (Florent Batard)Tue, 18 Aug 2026 00:00:00 +0000https://bluesquadron.dev/posts/sitadel-what-you-owe-your-users/Tue, 18 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/sitadel-what-you-owe-your-users/Eight years, 179 commits, and packaged in Kali and BlackArch — which I did not plan and which changed what I am allowed to break. On finding quality over detection coverage, a hang that only existed in a real terminal, and the cleanup nobody asks for.https://bluesquadron.dev/posts/watari-a-control-that-was-never-on/Tue, 11 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/watari-a-control-that-was-never-on/Watari’s headline claim is tenant isolation enforced by PostgreSQL Row-Level Security. The policies had been in the schema for months and had never once taken effect. Turning them on took four changes that had to land together — and none of them was writing a policy.https://bluesquadron.dev/posts/secrust-when-adding-cores-made-it-slower/Tue, 04 Aug 2026 00:00:00 +0000florent.batard@gmail.com (Florent Batard)https://bluesquadron.dev/posts/secrust-when-adding-cores-made-it-slower/A single-process Sigma correlation engine in Rust. Eight optimisation passes took the realistic workload up 301% — and then four threads made it 23% slower than two. Why that happened, what I shipped as the default, and the things I decided not to build.