# Wiki Index

## Summaries
- [[dont-sign-in-with-google]] — the_smart_ape on the cascading-SaaS-loss case study, Truffle Security's $12-domain-takeover flaw, multilogin refresh-token replay, consent phishing, and the recovery-damage rule for when SSO is actually fine
- [[appsec-guide-fuzzing-handbook]] — Trail of Bits Testing Handbook fuzzing chapter: terminology, the mutation-based evolutionary algorithm with pseudocode, bug-class taxonomy beyond crashes
- [[gosentry-go-fuzzing-fork]] — Trail of Bits forks the Go toolchain so `testing.F` harnesses run through a LibAFL+Nautilus engine — struct/grammar inputs, race/leak/overflow detection, early consensus bugs in Optimism/Revm
- [[mintlify-chromafs]] — How Mintlify built a virtual filesystem (ChromaFs) to replace sandboxes and RAG for their docs assistant
- [[working-on-products-people-hate]] — Why individual engineers have limited control over product perception, and why that's okay
- [[adk-go]] — Google's Agent Development Kit for Go 1.0: tracing, plugins, HITL, YAML config, A2A protocol
- [[13kb-tcp-slow-start]] — Why downloads stall at 13 kB: TCP slow start and the initial congestion window
- [[basb-overview]] — Tiago Forte's Building a Second Brain methodology: CODE framework, PARA organization, progressive summarization
- [[subprime-ai-crisis]] — Zitron's case that AI demand is entirely subsidy-driven, with a predicted collapse sequence and warning signs
- [[signal-push-pull-algorithm]] — How signals work: push-pull reactivity with automatic dependency tracking, built from scratch in TypeScript
- [[altman-new-yorker-profile]] — Farrow & Marantz's 2026 investigative profile of Sam Altman: the Ilya Memos, Amodei documents, safety erosion, Gulf ambitions
- [[xray-tutorial]] — Step-by-step VLESS proxy setup with Xray-core: server config, TLS certs, clients on Android/Windows/Linux
- [[titit-local-ai]] — Neward's case for local open-source LLMs: cloud fragility, unsustainable economics, privacy, and learning by building
- [[log-distributed-llms]] — Why multi-agent LLM coding is a distributed consensus problem subject to FLP and Byzantine impossibility results
- [[git-magic-files]] — Catalog of committed files that control git behavior: .gitignore, .gitattributes, .mailmap, .git-blame-ignore-revs, and more
- [[macos-tcp-time-bomb]] — XNU kernel's 32-bit tcp_now overflows after 49.7 days, freezing TIME_WAIT and killing TCP
- [[cult-of-vibe-coding]] — Bram Cohen on why refusing to read AI-generated code is dogfooding gone cult, with his audit-discuss-execute workflow
- [[hold-on-to-your-hardware]] — AI data centers are eating global DRAM/NAND/HDD supply, consumer hardware becoming scarce and expensive
- [[crqc-timeline]] — Valsorda's April 2026 reassessment: two papers collapsed quantum timelines, Google sets 2029 migration deadline
- [[llm-enshittification]] — Gentoo developer's comprehensive anti-LLM case: data theft, infrastructure harm, FLOSS fracturing, copywashing, labor displacement
- [[building-syntaqlite-ai]] — 8 years of wanting, 3 months with AI: vibe coding failure, disciplined rewrite, the addiction loop, and why design can't be delegated
- [[claude-emotion-concepts]] — Anthropic finds 171 emotion vectors in Claude that causally influence behavior, some invisibly to output observation
- [[bitcoin-quantum-computing]] — Narula's risk framework for Bitcoin's PQ migration: 5% break probability by 2030, uniquely hard due to decentralized governance
- [[win32-stable-abi]] — Glibc 2.36 broke Linux games by dropping DT_HASH; Win32 via Wine is the only stable ABI on Linux
- [[full-text-search-indexeddb]] — Building full-text search on IndexedDB with multiEntry indexes and rarest-term probing
- [[zsh-glob-qualifiers]] — Zsh's `(om[1])` glob qualifier trick: pick the newest file inline, no pipes needed
- [[linux-kernel-pgit]] — 1.4M kernel commits in PostgreSQL via pgit: contributor bottlenecks, GPU driver churn, and SQL-queryable git history
- [[lsm-trees-nosql]] — LSM tree architecture: MemTable, WAL, SSTables, Bloom filters, compaction strategies, and failure modes
- [[open-source-security-astral]] — Astral's full supply chain security posture: CI/CD lockdown, Trusted Publishing, Sigstore, dependency cooldowns
- [[ingodb]] — Self-morphing LSM document store in Rust: reactive indexing from query patterns, Liquid AST queries for AI agents
- [[ai-great-leap-forward]] — Corporate AI mandates as Great Leap Forward: backyard furnaces, fabricated metrics, anti-distillation, institutional knowledge loss
- [[filesystem-is-graph-database]] — Rumproarious on why a markdown vault with wikilinks is already a graph database, and the PARA extensions that make it scale to 52k files
- [[happ-subscription-converter]] — PHP scripts that emulate the Happ VPN client to extract VLESS lists and bypass HWID-based device limits
- [[build-your-own-openclaw]] — 18-step Python tutorial for building a Claude Code-style coding agent from scratch: chat loop → tools → skills → events → multi-agent → production
- [[no-silver-bullet-llms]] — Bennett applies Brooks' No Silver Bullet to LLM coding: math caps the upside, DORA/CircleCI show rising instability, Cloudflare Next.js rebuild as case study
- [[mcp-vs-skills]] — Mohl on why MCP is for service access and Skills are for knowledge: portability, auth, context bloat, and the hybrid pattern
- [[eth-geometric-quantum-gates]] — ETH Zurich achieves 99.91% fidelity swap gates on 17,000 neutral-atom qubit pairs using noise-resilient geometric phases
- [[clean-code-coding-agents]] — Code structure matters more with agents: context windows are finite, messy code wastes tokens on orientation
- [[ursa-kafka-storage]] — StreamNative's diskless Kafka storage engine: writes directly to S3 as Iceberg/Delta tables, 10x cheaper, protocol-vs-codebase meta-argument
- [[vamp-ai-frontend]] — Why framework implicitness (VDOM, hooks, reconciliation) is the enemy of AI-generated code, and a minimal explicit pattern that replaces it
- [[peril-of-laziness-lost]] — Cantrill on why LLMs lack the virtue of laziness: human time constraints drive simplicity, unchecked generation produces bloat
- [[obsidian-ai-complete-guide]] — Huashu's production implementation of the LLM Wiki pattern: three-layer architecture, SCHEMA.md, seven workflows, and why AI is a compiler not retriever
- [[go-transaction-linter]] — How léon h built transactioncheck after shipping a transaction leak bug to production
- [[ai-assisted-workflow]] — Barbero's seven-step workflow where planning happens before code and AI stress-tests thinking
- [[retrofitting-jit-c-interpreters]] — How yk uses meta-tracing to automatically derive JIT compilers from C interpreters
- [[win32-weird-shaped-windows]] — How Win32 lets you create non-rectangular windows, and why that era mostly disappeared
- [[database-index-gotchas]] — Common index pitfalls (composite order, functions) and lesser-known types (partial, covering, functional)
- [[syscall-binary-rewriting]] — Binary rewriting technique that replaces syscall instructions with INT3 traps for process isolation
- [[levenshtein-trie]] — Fuzzy dictionary search 300× faster by sharing Levenshtein table rows across trie prefixes
- [[paper-computer]] — Using physical media with AI digitization to escape screen dependency
- [[go-step-sequences]] — State machine pattern for multi-step tasks where each step returns the next
- [[average-is-all-you-need]] — Rawquery's thesis that LLMs make "average" output cheap, with an agent-driven email-attribution walkthrough
- [[simplified-model-of-fil-c]] — Cawley's step-by-step walkthrough of Fil-C's shadow capabilities, invisible bytes, and GC-backed memory safety for C/C++
- [[features-to-steal-from-npmx]] — Nesbitt's catalog of 17 npmx.dev features as a registry-design spec, plus the competitive-pressure effect on npmjs.com
- [[i-dont-want-your-prs]] — Ciężarkiewicz's post-LLM rethink of open-source collaboration; prompts, feedback, and forks over PRs
- [[bubblewrap-dev-env]] — Practical Bubblewrap isolation for LLM agents with Nix and tmux integration
- [[safe-gc]] — Fitzgerald's zero-unsafe Rust GC: indexing-not-deref as the whole safety story, mark-and-sweep because copying wouldn't borrow-check
- [[forge]] — Nesbitt's unified Go CLI and library over GitHub/GitLab/Gitea/Forgejo/Bitbucket, auto-detected from git remote, for humans and coding agents
- [[type-systems-vocabulary]] — Campbell's pet-peeve note: static/dynamic and strong/weak are orthogonal, "strict typing" is an amateur term
- [[message-passing-shared-mutable-state]] — Tu et al's 2019 Go bug study confirms Lee's 2006 prediction: 58% of blocking bugs were channel bugs, channels are concurrent queues
- [[t-context-go-testing]] — Hall on when to use Go 1.24's `T.Context()` (default: yes; exception: shared resources outliving a single test)
- [[dosbox-detection-callback-opcode]] — Detecting DOSBox by triggering its custom-invented `FE 38 00 00` callback opcode and watching for `#UD`
- [[samsch-jwt-auth-gist]] — Long-circulating gist arguing JWTs are wrong for sessions; use cookie sessions, and PASETO for the rare short-lived-token cases
- [[sdl3-dos-port]] — SDL3 gains native DOS support via DJGPP: VGA/VESA, Sound Blaster, INT-driven input, cooperative threading via setjmp/longjmp (PR #15377, merged 2026-04-23)
- [[deepseek-v4-roleplay-instruct]] — Reverse-engineered first-user-message markers that toggle DeepSeek-V4's `<think>` style between immersive monologue and pure analysis
- [[long-lived-keys]] — Ludwig's case for ephemeral credentials over rotation: EC2 Instance Connect, PyPI Trusted Publishers, SSO; concentrate the toil for what's left
- [[terminal-gpu-battery-cost]] — Why Ghostty et al. drain MacBook battery 30× more than a browser, and the iTerm2 / Terminal.app workarounds for Claude Code sessions
- [[linux-7-postgres-regression]] — Linux 7.0 removed PREEMPT_NONE; PostgreSQL throughput halved on 96-vCPU Graviton4 because spinlock holders now get preempted mid–page-fault
- [[zig-functional-programmers]] — A 10-year Haskeller's case for Zig: comptime gets you most of Haskell's type-system programming without garbage collection
- [[clippy-stricter-config]] — Schwartz's curated Clippy lints to recover "if it compiles, it works" — panics, dropped futures, async footguns, agent guardrails
- [[ceo-ai-psychosis]] — HandyAI on Garry Tan's gstack, tokenmaxxing leaderboards, and the structural sycophancy that makes executive agent-orchestration feel productive without being productive
- [[text-editor-as-ui]] — Dave Gauer's case for shelling out to $EDITOR as a middle ground between CLI flags and a full TUI, with a yt-dlp wrapper as the worked example
- [[early-dos-paterson-listings]] — Microsoft's April 2026 release of Tim Paterson's recovered, OCR'd 86-DOS 1.00 / PC-DOS 1.00 source listings, MIT-licensed
- [[itanium-too-few-parameters]] — Raymond Chen on the failure modes of passing too few parameters, and how Itanium's NaT bit and register-stack engine architecturally enforce parameter count
- [[simonw-zig-anti-ai]] — Simon Willison on Zig's strict no-LLM contributor policy, the Bun fork situation, and Loris Cro's "contributor poker" framing
- [[structured-output-benchmark]] — Interfaze's open SOB benchmark across text/image/audio with seven metrics; finds JSON Pass beats Value Accuracy by 15-30 points on every frontier model
- [[ps5-linux-loadr]] — TheFlow's April 2026 ps5-linux-loader release: hypervisor exploit + Ubuntu 24.04 on PS5 Phat 3.xx-4.xx, x86 Linux desktop with full Zen 2 + RDNA 2
- [[awesome-deepseek-agent]] — DeepSeek's curated list of 16 AI agent / coding-assistant integrations, each with a step-by-step guide for V4-Pro / V4-Flash
- [[marius-bitwarden-not-recommended]] — Marius's case against Bitwarden after years of self-hosting: investor capture, enterprise architecture, five-incident security pattern (KDF flaw → Shai-Hulud), divide-and-conquer credential split
- [[agentic-coding-fatigue]] — 0xsid on decision fatigue as the next invisible friction: gacha-loop psychology, broken pacing, 4-5 hour daily ceiling, and the verifier-of-the-verifier regress
- [[coywolf-byline-rss]] — Henshaw's writeup of Terry Godier's Byline proposal — structured author context for RSS/Atom/JSON Feed via a new namespace
- [[unsigned-sizes-c3-mistake]] — C3's Christoffer Lerno on why unsigned-default sizes were a five-year mistake, and why Java and Go got it right
- [[specsmaxxing]] — acai.sh's author on numbered acceptance-criteria IDs as the missing link between agent-written code and a stable spec
- [[microvm-2026]] — Beganović's industry readout: why microVMs reached production maturity for unrelated reasons over 8 years and are now agent-sandboxing's "Docker moment"
- [[microkernel-ipc-design]] — Nuta's FTL IPC redesign: notify-and-pull, no IDL, Plan-9-shaped ops, peek-then-receive, pull-based queues
- [[agentic-coding-is-a-trap]] — Lars Faye on the supervision paradox: agent oversight requires the skills agent use erodes; plus vendor lock-in and token volatility
- [[jdx-going-full-time-oss]] — Jeff Dickey leaves Figma to work full-time on mise and friends under en.dev, with $600/month of OSS income at announcement and a tiered sponsorship plan
- [[i-am-an-ai-hater]] — Moser's August 2025 essay refusing the polite-AI-discourse trap, citing documented harms, and naming the social transaction ("you want permission")
- [[sail-muddy-lessons]] — Alejandro Garcia Salas's four-year retrospective on building a multiplayer browser: positioning, dogfooding, reps as the only durable lesson
- [[bypassing-dpi-with-ebpf]] — Bora Tanrıkulu builds gecit: eBPF sock_ops on Linux for in-kernel SNI desync, gVisor + TUN as the "tiny VPN" fallback on macOS/Windows
- [[simonw-vibe-coding-agentic]] — Willison admits the vibe-coding/agentic-engineering line collapsed in his own practice — production code shipped without line-by-line review
- [[valve-steam-controller-cad]] — Valve releases .STP/.STL shell-topology + engineering diagrams for the new Steam Controller and Puck under CC BY-NC-SA 4.0
- [[stroustrup-memory-leaks]] — Stroustrup's C++ FAQ answer: write code without leaks by hiding allocation in containers and resource handles, with the 1981 "tens of thousands → dozens" anecdote
- [[i-will-never-use-ai]] — Manning-Franklin's nine-reason refusal: craft, learning, atrophy, economics, accountability, environment, irrationality, team dynamics — stitched together
- [[chatgpt-5-5-pro-mathematical-research]] — Gowers + Rajagopal: ChatGPT 5.5 Pro proposes an "original and clever" $h^2$-dissociated-set construction, polynomial bound on $N(h,k)$, in under two hours
- [[programming-still-sucks]] — stvn's reply to Peter Welch: AI didn't take the jobs, greed did; Sara below decks with the USB stick is what the apprenticeship loss left behind
- [[meta-ai-employees-miserable]] — NYT (May 2026) on the morale collapse inside Meta's Superintelligence Labs: Wang's 600-person cut, Bosworth's parallel org, 64% retention
- [[mpc-beaver-triples]] — Stoffel Labs' restaurant-night walkthrough of how Beaver triples enable secret-shared multiplication without raising the reconstruction threshold
- [[programming-as-theory-building-codeutopia]] — Hartikainen's recommendation of Naur's 1985 essay; programming as building a shared mental theory of the program
- [[yggdrasil-embedded-go]] — asciimoth's tutorial on embedding Yggdrasil mesh networking in Go via their fork: Core, VTun, transports, autopeering, no daemon
- [[rust-async-trait-sync-bound]] — verrchu on why `&self` in async trait methods returning `Send` futures silently demands `Self: Sync`, and why `&mut self` quietly fixes it
- [[lucumr-local-models]] — Armin Ronacher on why local-LLM UX is bad — fragmentation, missing tool-streaming, no critical mass — and the pi-ds4 / ds4.c bet
- [[agent-principal-agent-problem]] — Crawshaw on how agents broke code review by collapsing the effort signal between contributor and reviewer; small-team escape, big-co dead end
- [[pq-wireguard-revisited]] — Hashimoto et al. (IACR 2025/1758) redesign PQ-WireGuard with a new RKEM primitive (Rebar), shrinking server PK memory 190–390×
- [[hybrid-wireguard]] — Lafourcade et al. (USENIX 2025) formally analyze PQ-WireGuard in SAPIC+, fix it, and propose a hybrid variant with a Rust implementation
- [[since-you-arrived-vol4]] — Matt W. / Rise Up Labs four-volume browser piece on what happens elsewhere while you're on the page
- [[ryelang-whitelist-config]] — Refaktor on embedding Rye in Go: six-step walkthrough from data-only config to user-defined `fn` callbacks and live REPL, with per-word capability registration
- [[tanstack-npm-supply-chain-postmortem]] — Linsley's postmortem: three known vulnerabilities (pwn-request → cache poisoning → OIDC token extraction) chained into 84 malicious `@tanstack/*` publishes, with prevention checklist
- [[fsnotify-maintainer-dispute]] — Socket on the 321k-dependent fsnotify access dispute that read like a takeover but wasn't; governance ambiguity as supply-chain risk
- [[typesetinthefuture-futuristic]] — Addey's six (plus one) rules for futuristic film logotypes: italic slant, curvy-vs-angular, consummate Vs, ligatures, removed strokes, brushed metal
- [[marius-rise-of-the-bullshittery]] — Marius on a market paying for performance over substance: Frankfurt, LinkedIn grift, LLM-cheap content, Graeber's bullshit jobs, *be embarrassable*
- [[obsidian-future-of-plugins]] — Obsidian launches Community directory + automated per-release review, processed 2,300+ queued submissions in days
- [[duckdb-quack-protocol]] — DuckDB's HTTP-based client/server protocol: 60M rows in <5s, beats Arrow Flight 3× and Postgres 32× on bulk
- [[redis-cost-of-ambition]] — Leifer on Redis's feature-set inflation tracking each year's HN trend, RESP3 as second-system effect, Valkey as the market's verdict
- [[specular-what-is-busybox]] — Walk-through of BusyBox's multicall dispatch — one binary, 130+ symlinks in Alpine, 304 applets compiled in
- [[local-llm-16gb-vram-tests]] — Vyacheslav's three-model RTX 5070 Ti tests via OpenCode + llama.cpp; Gemma 4 wins 12/12 in Fast, Thinking mode hurts rule-following
- [[habr-local-llm-quantization-deep-dive]] — Vyacheslav's primer: BF16 history, K/I/UD quants, `-fit`/`-cmoe`/`-ncmoe`, why Ollama is 3× slower, REAP, ik_llama, speculative decoding
- [[reddit-qwen3-6-mtp-12gb]] — janvitos's Qwen3.6-35B-A3B + MTP setup on RTX 4070 Super 12GB; 80 t/s with 128K context via `-fitt 1536`; thread covers turbo4 KV cache on GTX 1070
- [[little-coder-scaffold-model-fit]] — Inbarr's matched-model study: Qwen3.5-9B Q4_K_M goes 19.11% → 45.56% on Aider Polyglot by redesigning the scaffold around small-model behavior
- [[incompressible-knowledge-probes]] — Bojie Li's IKP benchmark estimates closed-model parameter counts from factual capacity; GPT-5.5 ~9.7T, falsifies Densing Law for stored knowledge
- [[interactive-turboquant]] — arkaung's interactive explainer of the DRIVE → EDEN → TurboQuant lineage; rotate-then-quantize, one fixed codebook for every input
- [[if-ai-writes-your-code-why-use-python]] — Mitchem's case that the Python/TS default broke once agents got good at Rust and Go: Q1 2026 shipped artifacts, the patch→port shift, and where the argument breaks
- [[linux-kernel-startup]] — Espino's six-phase x86_64 boot map: assembly trampoline → early C → setup_arch → start_kernel → rest_init split into PID 0/1/2 → kernel_init exec'ing /sbin/init
- [[1password-agentic-refactoring]] — 1Password decomposes a multi-million-line Go monolith with AI agents; the win is agent-built deterministic tools, not agent-written code
- [[steering-vectors-interesting-again]] — Goedecke on why steering stayed a middle-class technique, and why DwarfStar 4 + DeepSeek V4 Flash change that
- [[no-hard-problem-consciousness]] — Carlo Rovelli (Noema, May 2026) on why Chalmers' "hard problem" smuggles dualism upfront and the soul is part of nature
- [[dont-outsource-learning]] — Addy Osmani on the default AI coding loop, the three converging cognitive-debt studies (Anthropic / MIT / CHI 2026), and the posture-shift prescription
- [[ai-backlash-polling-2026]] — Axios on the May 2026 polling collapse: 18% of under-30s hopeful about AI, 70%+ say it's moving too fast, bipartisan agreement
- [[ai-too-expensive]] — Zitron's May 2026 follow-up: Microsoft's $87B OpenAI sink, Anthropic's $3-per-$1 ratio, Zillow as AI Chernobyl, enterprise token-budget revolt, Business Idiot turn
- [[ssh-port-forwarding-cheatsheet]] — Graham Helton's red-team walkthrough of SSH -L/-R/-D/-J/-A/-g/-t, the ~? runtime console, and Match-keyword config
- [[elena-verna-job-2027]] — Elena Verna's adapt-or-die letter to tech workers: solopreneurship as career insurance, six-tier AI-native ladder ending at agents
- [[rivet-docker-sandbox-microvm]] — Rivet reverse-engineers Docker Sandbox's undocumented `/vm` HTTP API; each microVM gets its own docker.sock, outbound MITM proxy, six-agent whitelist as the only blocker
- [[loopwerk-uv-ux-mess]] — Kevin Renskers on uv's maintenance UX gaps (no `outdated`, open-bound version defaults, `uv lock --upgrade` instead of `uv update`) — fast and unified, but a step backward from Poetry/pnpm for routine project upkeep
- [[stop-using-pull-requests]] — Laforgia's evidence synthesis against PRs: origin-story category error, <15% of comments about bugs, 86-99% of lead time waiting, the T*D alternative and a five-stage transition
- [[specification-website-checklist]] — Nine-category catalog of modern web specs with Required/Recommended/Optional/Avoid tags; agent readiness sits next to SEO and a11y as a peer category
- [[llm-critics-are-right-use-anyway]] — Theocharis on the dissonance of agreeing with nearly every anti-LLM argument while spending $10k/month on tokens; the /grill-me, Pitch, adversarial-subagent, and intuition-probe patterns
- [[speculative-growth-ai-bubble]] — Caballero's (MIT) formal argument that an unsustainable AI valuation can leave a permanent real legacy — the bubble pops and the capital stays — if the correction arrives late enough
- [[git-history-command]] — New experimental `git history` subcommand (fixup/reword/split) that rewrites old commits and autorebases all local branches atomically
- [[tao-apps-coding-agents]] — Terence Tao ports his 1999 math applets and vibe-codes new visualizations with coding agents, drawing a line at where bugs are tolerable
- [[mesh-llm]] — Pools GPUs across machines as one OpenAI-compatible API, splitting big models across nodes over iroh's p2p QUIC
- [[zerofs-vs-s3-files]] — Two POSIX filesystems on object storage compared: S3 Files keeps files as readable S3 objects, ZeroFS treats the bucket as encrypted private substrate
- [[know-thine-enemy]] — Amy Ko's three-month experiment using Claude Code as an LLM skeptic; it worked and cost her focus, joy, money, and values, landing on harm reduction
- [[gleam-pretty-printer-arenas]] — Cavalieri closed a three-year-old Gleam issue by moving the pretty printer's boxed tree to Rust arena references: ~24% faster, ~10% less peak memory
- [[slow-software-high-latency]] — Irene Zhang's case for deliberately slow development of critical infrastructure, now that AI decoupled a system's importance from its build time
- [[tracking-work-github-issues]] — Mike Zornek's work-tracking system: GitHub Issues/Projects, nine status stages, issue types, and PRs written as stories
- [[not-understanding-your-codebase]] — Goedecke's defense of partial understanding in large codebases, and how it sits against the skill-atrophy worries
- [[control-the-ideas-not-the-code]] — antirez on why line-by-line review of LLM code is wasted effort; own the design instead
- [[phk-goodbye-bikesheds]] — Poul-Henning Kamp's farewell Bikeshed column: LLM code review a bounded fad, but age verification, attestation, and EU accountability rules end BDFL-style FOSS
- [[sqlite-strict-tables]] — Why STRICT tables beat SQLite's default flexible typing, and the type-affinity mechanics behind it
- [[who-manages-the-agents]] — off-policy.com's "agents for humans, not instead of humans" case: make the median worker 2× and turn everyone into an agent manager
- [[compiler-codegen-luck]] — A one-line C rewrite flips Clang between a branch and branchless csel/cmov, changing quicksort speed 6×
- [[soviet-control-rooms]] — Soviet-era control-room aesthetics; the HN thread supplies the engineering and design context
- [[agent-memory-strategy-decision-tree]] — Five-question tree for placing each category of agent information into working, semantic, episodic, or procedural memory
- [[ai-cannot-forget-forgive]] — Machine memory has no decay and no forgiveness op; forgetting is adaptive compression the substrate lacks
- [[good-tools-are-invisible]] — Ginger Bill on why a good tool disappears into the background, and why celebrating its friction as a "fun puzzle" means it's failing you
- [[swe-1-7]] — Cognition's SWE-1.7 coding model, RL-trained from Kimi K2.7, near GPT-5.5 on coding benchmarks (all vendor-reported)
- [[notes-on-software-quality]] — Hobday's quality notes: absence-of-problems definition, six software signals, and the claim quality can't survive scale
- [[reviewing-ai-code]] — Depierre's empirical case that "just review the AI's code like an intern's" collapses against code-review throughput limits and reviewer overconfidence
- [[readme-not]] — Woodruff's proposal for a READMENOT marker file that honestly signals a project is slop, not meant for unwitting human reading
- [[danluu-ai-coding-testing]] — Dan Luu applies CPU-verification habits to AI coding: testing-heavy no-review workflows, the meaninglessness of single-number benchmarks, working around agent failure modes
- [[openssl-error-handling-pandemic]] — Klode on the widespread anti-pattern of clearing OpenSSL's error stack to make TLS errors go away
- [[cleberg-server-build-summary]] — homelab writeup: consumer-parts 4U build over used enterprise gear, and the backwards fan that cooked the drives
- [[spindle-microvm]] — Tangled's CI runner gains a QEMU-microVM engine: per-workflow VMs, NixOS-from-YAML config, a vsock guest agent, two-way Nix caching
- [[local-ai-is-not-opus]] — Alex Ellis on why local Qwen isn't near-Opus but still earns its keep: privacy, fixed cost, vendor-risk, and the bounded tasks an RTX 6000 handles
- [[constraint-decay-backend-agents]] — Dente/Satriani/Papotti benchmark: coding agents lose ~30 assertion-pass points as production structural constraints (ORMs, DBs, conventions) accumulate
- [[agentic-search-context-engineering]] — Monigatti's workshop: context engineering is ~80% agentic search; fixed RAG → agentic RAG → multi-source search, and "Bash + Filesystem is all you need"
- [[agent-memory-anatomy]] — brgsk's extractor/store/retriever decomposition, and why production agent "memory" is really just autobiographical semantic memory
- [[twelve-ways-wrong-ai-coding]] — Greg Wilson's twelve measurement errors in AI-coding studies, each mapped to a research-methods failure (Goodhart, Hawthorne, selection bias)
- [[ai-is-not-conscious-chiang]] — Ted Chiang: LLMs are sentence-continuation machines, can't be moral agents, and anthropomorphism off-loads responsibility
- [[lapsarianism-doctorow]] — Doctorow on decline as structural, not nostalgia: 50 years of dismantled antitrust, the Dark Tower "beams," and why shopping isn't politics
- [[what-happened-to-nerds]] — mrmarket on tech leadership liquidating 40 years of product-nerd trust into personal fame, and AI labs becoming media companies
- [[build-a-new-internet]] — mrmarket on abandoning the polluted "Obvious Internet" for a small, high-friction, good-faith knowledge commons
- [[anubis-wasm-vendor-binary]] — Xe Iaso on why a bit-for-bit reproducible vendored wasm2js is hard: build timestamps, PATH wasm-opt, pointer values leaking into codegen
- [[reuse-less-software]] — icefox on the inverted software crisis: we reuse too much; vendor everything to make each dependency a supply-chain fire-break
- [[go-privilege-dropping]] — oxzi's stack for irreversibly dropping privilege in Go: chroot/setuid, setrlimit, pledge/unveil, seccomp, Landlock
- [[cheap-reverse-engineering]] — Willison on how cheap agent-written code flips the ROI of reverse-engineering home devices; the unlock is disposability, not possibility
- [[no-ai-statements]] — James Zhan's case for declaring human authorship: handmade-label precedent, detectors failing both ways, and the marker as a stance rather than evidence
- [[claude-is-not-a-compiler]] — Bleecher Snyder retires the compiler analogy; exe.dev's distributed DNS server built by concurrent agent loops in a week of attention
- [[programming-differently-difficult]] — Osborn's CACM piece grounding the AI-coding shift in memory research; the burden moves from recall to judgment, not away
- [[block-buzz-workspace]] — Dorsey's Nostr-backed chat + agents + Git forge, and the gap between its decentralization claim and its single-relay architecture
- [[no-empires-in-age-of-empires]] — Devereaux on what an empire actually is, and why strategy games model murderous nation-states instead

## Entities
- [[claude-code]] — Anthropic's terminal coding agent; the tool that maintains this vault and the thing most of the toolbox extends
- [[andrew-bosworth]] — Meta CTO who built the parallel Applied AI Engineering org that routes around Wang's Superintelligence Labs
- [[the-smart-ape]] — X/Twitter account writing long-form security and SaaS-operator threads anchored in named-victim case studies
- [[mintlify]] — Developer tools company building AI-powered documentation assistants
- [[antonz-org]] — Anton Zhiyanov's blog on Go, SQL, CLI tools, and interactive programming guides
- [[edward-zitron]] — Tech journalist behind "Where's Your Ed At," focused on AI industry financial unsustainability
- [[sam-altman]] — CEO of OpenAI, central figure in AI industry governance debates
- [[openai]] — AI company behind ChatGPT, converted from nonprofit to for-profit, preparing for $1T IPO
- [[borogove]] — Web-based XMPP chat client with local IndexedDB message storage
- [[happ-proxy]] — Closed-source Android/iOS VLESS client popular in the RU VPN reseller market, with client-discriminating subscription endpoints
- [[james-bennett]] — Django core contributor, blogger at b-list.org, careful LLM skeptic
- [[fred-brooks]] — Author of The Mythical Man-Month and No Silver Bullet; Turing Award 1999
- [[bryan-cantrill]] — Systems engineer, DTrace co-creator, Oxide CTO; writes on software engineering culture
- [[sing-box]] — Universal Go-based proxy core (SagerNet); the engine underneath Karing and many modern circumvention clients
- [[tspu]] — Russia's state-mandated DPI infrastructure at every major ISP; enforcement layer behind current VPN blocks
- [[nesbitt-io]] — Andrew Nesbitt's blog on package registries, git internals, and open-source observability
- [[npmx]] — MIT-licensed alternative web frontend over the npm registry, launched Jan 2026 by Daniel Roe
- [[dpc-pw]] — Dawid Ciężarkiewicz's blog on LLM coding, dev-env isolation, open-source collaboration
- [[lewis-campbell]] — Software/data consultant blogging at lewiscampbell.tech with short opinionated programming notes
- [[boldlygo-tech]] — Jonathan Hall's daily Go-language blog and newsletter (boldlygo.tech)
- [[datagirl-xyz]] — Snow's blog on retro x86/DOS systems, emulator internals, and low-level reverse engineering
- [[sdl]] — Cross-platform low-level library (video/audio/input/threading); SDL3 now supports DOS as a first-class target
- [[deepseek]] — Chinese AI lab; V3/R1/V4 model line drove the open-weights reasoning-model cost-collapse story
- [[causality-blog]] — Anonymous essay blog on programming-language foundations and concurrency, takes contrarian framings of long-standing debates
- [[argemma-blog]] — Security-engineering blog at argemma.com on cryptography, credentials, Go vulnerabilities, and AI/ML threat models
- [[postgresql]] — Open-source RDBMS; process-per-connection backend model with shared-buffer-pool spinlocks, central to several kernel-interaction stories
- [[the-coder-cafe]] — Substack newsletter covering one Linux/systems/concurrency concept per post
- [[zig]] — Andrew Kelley's systems language: explicit allocators, no spooky action at a distance, comptime as the single metaprogramming mechanism
- [[pure-systems-blog]] — Blog at pure-systems.org on FP, language design, and systems programming from a long-time Haskeller
- [[clippy]] — The official Rust linter; hundreds of lints in ten categories, configured via Cargo.toml and clippy.toml
- [[emschwartz-blog]] — Evan Schwartz's blog at emschwartz.me on Rust in production, web payments, and the Scour personalized-feed product
- [[garry-tan]] — Y Combinator CEO since 2023; the gstack episode and "cyber psychosis" framing
- [[handyai-blog]] — Substack on agent workflows, async coding bots, and AI-assisted work; PM-flavored, anti-theater
- [[ratfactor]] — Dave Gauer's long-running card-format personal site on Unix, scripting, Zig, and digital-garden writing
- [[oldnewthing-blog]] — Raymond Chen's long-running Microsoft devblog on Windows internals, calling conventions, and NT/Win9x archaeology
- [[simon-willison-blog]] — Simon Willison's daily blog on LLMs, Datasette, web tooling, and open-source governance
- [[interfaze]] — AI startup building a deterministic structured-output model; published the open Structured Output Benchmark in April 2026
- [[gtfobins]] — Curated catalog of Unix executables abusable for shell escape, privilege escalation, and file transfer; the canonical "live off the land" reference
- [[marius-blog]] — Marius's blog on self-hosting, OpenBSD, GrapheneOS, hardware longevity, and the politics of consumer computing
- [[bitwarden]] — Freemium open-source password manager, $100M PSG-backed since 2022, accumulating client and supply-chain security incidents
- [[retrocatalog]] — Single-author database of retro gaming handhelds and emulator-target games; buyer's-guide framing over the Anbernic/Miyoo/Retroid market
- [[vaultwarden]] — dani-garcia's Rust reimplementation of the Bitwarden server, lightweight and ~3× the GitHub stars of the official server
- [[0xsid-blog]] — 0xsid's personal blog on the practical experience of agentic coding workflows
- [[coywolf-blog]] — Jon Henshaw's coywolf.com — short notes on web tech, RSS, indie web, and SEO-adjacent tooling
- [[c3-lang]] — Christoffer Lerno's C-tradition systems language and its design-rationale blog
- [[acai-blog]] — Single-author blog from the developer of acai.sh on spec-driven AI-assisted development
- [[emir-beganovic-blog]] — Booking.com Staff SRE's long-form infrastructure surveys; KubeCon-shaped industry readouts on virtualization and sandboxing
- [[rust-vmm]] — Multi-vendor shared Rust crate ecosystem under most modern VMMs (Firecracker, Cloud Hypervisor, libkrun, crosvm)
- [[qemu-microvm]] — QEMU's stripped-down x86 machine type (-M microvm): no PCI, no ACPI, virtio-mmio only, qboot firmware, direct kernel boot, triple-fault shutdown
- [[seiya-nuta-blog]] — Seiya Nuta's blog at seiya.me; author of Resea and FTL microkernels
- [[lars-faye-blog]] — Lars Faye's larsfaye.com — articles on AI in software engineering, vendor dependency, and developer-skill economics
- [[jdx-blog]] — Jeff Dickey's blog at jdx.dev — author of mise and several other developer-tooling projects under the en.dev umbrella
- [[anthony-moser-blog]] — Anthony Moser's GitHub Pages site; the "haterdom" essay series with community translations
- [[alejandro-pe]] — Alejandro Garcia Salas's site at alejandro.pe — long-form retrospectives from a founding-engineer career
- [[bora-blog]] — Bora Tanrıkulu's bora.sh blog: short systems write-ups in "I built X, here's the gnarly platform-specific bit" format
- [[antman-blog]] — Anthony Manning-Franklin's antman-does-software.com — first-person essays on craft, learning, and AI refusal
- [[gowers-blog]] — Tim Gowers's WordPress blog on combinatorics, math exposition, and (recently) LLM-assisted mathematical research
- [[stvn-blog]] — stvn's writing site at stvn.sh — first-person narrative essays on tech work and AI corporate culture
- [[meta-platforms]] — Facebook/Instagram parent company; the AI org under Wang/Bosworth has become the public face of large-AI-lab dysfunction in 2026
- [[alexandr-wang]] — Scale AI founder, Meta's CAO at 29 via the ~$14.3B Scale acqui-hire; runs Superintelligence Labs through the 2026 retention crisis
- [[stoffel-mpc]] — Stoffel Labs, MPC-as-a-service company with a developer-facing platform on top of secret sharing + Beaver triples
- [[codeutopia-blog]] — Jani Hartikainen's long-running blog on testing, maintainability, and the craft side of software engineering
- [[asciimoth-ygg]] — Fork of yggdrasil-go separating ygglib from yggd, with embedded userspace TCP/IP stack for in-process mesh networking
- [[verrchu-blog]] — Rust-focused blog at verrchu.github.io — short, deep posts with full compile errors and accompanying source
- [[lucumr-blog]] — Armin Ronacher's blog at lucumr.pocoo.org — Flask creator, Sentry co-founder, currently building Pi
- [[crawshaw-blog]] — David Crawshaw's blog at crawshaw.io — exe.dev co-founder writing on agent-driven engineering and small-team economics
- [[rye-lang]] — Homoiconic general-purpose language in pure Go, designed to be embedded with zero reserved forms and per-word capability registration
- [[ryelang-blog]] — refaktor/rye project blog at ryelang.org/blog — language design notes and embedding tutorials
- [[tanstack]] — Tanner Linsley's JS/TS library collective (Query, Router, Table, Form, Virtual, Start); subject of the May 2026 npm supply-chain compromise
- [[fsnotify]] — Go cross-platform filesystem-notifications library; 321k dependent projects, low in the Go stack
- [[mattn]] — Yasuhiro Matsumoto, prolific Japanese Go and Vim developer; central to the May 2026 fsnotify dispute
- [[arp242]] — Martin Tournoij, primary fsnotify maintainer; arp242.net
- [[socket-blog]] — Socket.dev's writeups of npm/PyPI/RubyGems supply-chain incidents
- [[xz-utils-incident]] — 2024 social-engineering supply-chain attack via maintainer-trust capture; the reference incident that reset community vigilance
- [[trail-of-bits]] — NYC security consultancy; Manticore / Slither / Echidna / gosentry; long history of audits and fuzzing tooling for crypto/blockchain
- [[appsec-guide]] — Trail of Bits' open Testing Handbook (appsec.guide); reference material on fuzzing, static analysis, crypto, and web app testing, by language and topic
- [[libafl]] — Rust framework of composable fuzzer parts (stages, mutators, observers, feedbacks); the engine underneath gosentry and AFL++'s rewrite path
- [[nautilus-fuzzer]] — NDSS 2019 grammar-based coverage-guided fuzzer; stores inputs as derivation trees and ships the JSON-array grammar format reused by gosentry
- [[typesetinthefuture-blog]] — Dave Addey's blog on the typography and graphic design of sci-fi films; book of the same name (2018, Abrams)
- [[obsidian]] — Local-first markdown PKM with 4,000+ plugins/themes; the canonical target this wiki is built against
- [[duckdb]] — In-process analytical SQL database; added the Quack HTTP-based client/server protocol in 2026
- [[charles-leifer-blog]] — Python and database systems engineer at charlesleifer.com; peewee, SQLite/Postgres, Redis internals
- [[specular-blog]] — Personal engineering blog at specular.fi; short, code-driven notes on Linux internals and Unix tools
- [[unsloth]] — Quantization team behind the UD-…-XL GGUF family and Unsloth Dynamic 2.0; most-cited dynamic-quant publisher for Qwen / Gemma / DeepSeek
- [[pine-ai]] — Bojie Li's research org behind the Incompressible Knowledge Probes paper; 01.me/research
- [[itayinbarr-blog]] — Itay Inbarr's Substack on agent scaffolds, small-local-model benchmarks, and the scaffold-model-fit framing
- [[arkaung-blog]] — arkaung's GitHub Pages site with interactive math tutorials; Interactive TurboQuant is the first piece
- [[internals-for-interns]] — Jesús Espino's weekly blog on software internals — Go runtime, filesystems, Linux kernel — "useful maps" not exhaustive references
- [[sean-goedecke-blog]] — GitHub staff engineer's blog on careers, agency at scale, and LLM interpretability
- [[addy-osmani-blog]] — Google Chrome engineering manager's blog on web performance, software craft, and the cognitive economics of AI-assisted coding
- [[jxnl-blog]] — Jason Liu's writing at jxnl.co — Instructor author, AI agent workflows, structured output, knowledge work with coding agents
- [[billjings-blog]] — Bill Jings on software engineering practice, version control, and async development workflows; long-form, opinionated
- [[dayvster-blog]] — Dayvi Schuster's blog on Zig/Odin/C3, memory management, contrarian anti-Rust takes
- [[metalevel-at]] — Markus Triska's site — *The Power of Prolog* book, declarative-programming essays, CLP and DCG library work
- [[andymasley-blog]] — Andy Masley's Substack on AI environmental claims; numerate, source-cited, sober pro-AI on narrow technical points
- [[zknill-blog]] — Zach Knill on distributed systems, durable execution, agent infrastructure, and missing cloud-native primitives
- [[avkcode-blog]] — avkcode's GitHub Pages blog on AI industry economics and geopolitics from an infrastructure angle
- [[graham-helton-blog]] — red-team operator's blog at grahamhelton.com on SSH tradecraft, lateral movement, and offensive security tooling
- [[elena-verna-blog]] — Elena Verna's Substack on PLG, solopreneurship, and adapt-or-die framing for the AI-shaped workplace
- [[rivet-blog]] — rivet.dev engineering writeups from the team behind the Sandbox Agent SDK; agent sandboxing and microVM infrastructure
- [[loopwerk-blog]] — Kevin Renskers's loopwerk.io — practical field-notes on Python, web frameworks, and developer tooling, comparison-shaped
- [[andrea-laforgia-blog]] — Andrea Laforgia's substack at a4al6a.substack.com — evidence-driven essays on software engineering practice, anchored in peer-reviewed research and DORA-scale industry data
- [[specification-website]] — Single-author opinionated reference catalog of modern web specs, including emerging agent-readiness conventions and its own Schemamap proposal
- [[theocharis-blog]] — Jeremy Theocharis's blog on LLM-assisted work and local-first software; the reconciliation stance, writes with LLMs about using LLMs
- [[terry-tao]] — Fields Medal mathematician writing first-hand about LLMs and coding agents for math exposition, tooling, and research
- [[amy-ko-blog]] — UW iSchool professor (HCI, CS education); writes Bits and Behavior on Medium, LLM-skeptical takes on programming and learning
- [[antirez]] — Salvatore Sanfilippo, creator of Redis, building the DwarfStar local inference engine; prolific on programming with LLMs
- [[gingerbill-blog]] — Ginger Bill's blog; creator of the Odin language, writing on tool and language design
- [[thomas-depierre-blog]] — Elixir/DevOps consultant at softwaremaxims.com; evidence-first takes on software practice and LLM skepticism
- [[danluu-blog]] — Dan Luu's measurement-driven engineering blog; CPU-verification background, testing/reliability/AI-coding writing
- [[yossarian-blog]] — William Woodruff's ENOSUCHBLOG; open-source security, packaging, and LLM-slop culture
- [[tangled]] — atproto-based git collaboration platform with self-hostable knots (repos) and spindles (CI)
- [[alex-ellis]] — OpenFaaS/Actuated/Inlets founder; blog on cloud-native, self-hosted infra, and local-AI economics
- [[leonie-monigatti-blog]] — leoniemonigatti.com on AI engineering, RAG, context engineering, and embeddings
- [[brgsk-blog]] — brgsk.xyz; writeups separating cognitive-science vocabulary from what agent memory systems actually build
- [[greg-wilson-blog]] — third-bit.com; Software Carpentry founder writing on empirical software engineering and research methods
- [[ted-chiang]] — SF writer and essayist; recurring critic of LLM hype and anthropomorphism for The New Yorker and The Atlantic
- [[cory-doctorow]] — SF author, EFF advisor, Pluralistic blogger; coined "enshittification"
- [[mrmarket-blog]] — mrmarket.bearblog.dev; essays on tech culture, founders, and the decay of the open internet
- [[xe-iaso]] — xeiaso.net; author of Anubis, writes on WebAssembly, reproducible builds, and web infrastructure
- [[icefox-alopex]] — icefox / Simon Heath; wiki.alopex.li on language design and software culture
- [[oxzi-blog]] — log.0x21.biz; Go and OpenBSD/Linux sandboxing writeups; author of syscallset-go
- [[james-zhan-blog]] — James Zhan's journal on writing, typography, and declaring human authorship; footer reads "100% written by James, not AI"
- [[exe-dev-blog]] — exe.dev's company blog; agent-driven engineering practice reports from the nine-person fast-booting-VM team
- [[acoup-blog]] — Bret Devereaux's ancient-history blog; the Collections series explains how pre-modern societies worked by arguing with pop culture
- [[block-inc]] — Jack Dorsey's payments company; publisher of Goose and Buzz, building agent tooling on open protocols
- [[runtimewire]] — developer-infrastructure news site that checks launch claims against the project's own architecture docs

## Concepts
- [[obsidian-bases]] — Obsidian's built-in database views over frontmatter; the vault's maintenance dashboards and why the orphan view was always empty
- [[sso-concentration-risk]] — SSO trades distributed risk for concentrated risk; the right rule is "if 30-day lockout would damage your work or money, don't SSO"
- [[google-oauth-domain-takeover]] — Truffle Security's January 2025 disclosure: $12 to buy a dead startup's domain, recreate employee emails, walk into the old Slack/Notion/Zoom
- [[oauth-token-theft]] — Refresh-token replay via the undocumented multilogin endpoint, plus consent phishing; both bypass password reset and 2FA
- [[virtual-filesystem-for-llm-agents]] — Exposing databases as UNIX filesystems so LLM agents can browse instead of relying on chunk retrieval
- [[rag-limitations]] — Failure modes of naive top-K retrieval that motivate richer agent access patterns
- [[individual-engineer-agency]] — The gap between individual engineering quality and product-level user perception
- [[human-in-the-loop]] — Design pattern where AI agents pause for human approval on sensitive operations
- [[agent2agent-protocol]] — Google's open protocol for cross-framework, cross-language agent communication
- [[tcp-congestion-control]] — How TCP throttles sending speed to prevent network collapse, and why the first RTT is ~13 kB
- [[progressive-summarization]] — Layered note distillation technique: compress a little more each time you revisit
- [[para-method]] — Organize everything by actionability: Projects, Areas, Resources, Archive
- [[llm-wiki-pattern]] — LLM incrementally builds and maintains a persistent wiki from raw sources
- [[ai-subsidy-economics]] — How every link in the AI chain runs on subsidies, from GPU sales to consumer subscriptions
- [[reactive-signals]] — Reactive primitive for automatic state propagation, now the dominant model in JS frameworks
- [[tc39-proposal-signals]] — Stage 1 proposal to add native Signal primitives to JavaScript
- [[distributed-consensus]] — Getting multiple processes to agree on a value: Paxos, Raft, PBFT, and the tradeoff space
- [[flp-impossibility]] — Proven 1985 result: no deterministic consensus in async systems with even one crash
- [[byzantine-fault]] — Failure mode where a node produces wrong output while appearing functional
- [[llms-txt]] — Proposed /llms.txt convention for giving LLMs a curated markdown overview of a website
- [[agent-memory-decay]] — Memory half-life, retrieval strengthening, and consolidation for AI agents
- [[hybrid-search]] — Combining BM25 keyword search with embedding similarity for better retrieval
- [[memory-conflict-detection]] — Detecting contradictory knowledge and keeping both visible instead of silently overwriting
- [[post-quantum-cryptography]] — PQ algorithms, NIST standards, migration priorities, and what's not threatened
- [[crqc]] — Cryptographically relevant quantum computer: what it is, threshold, April 2026 timeline collapse
- [[ml-kem]] — Module-Lattice KEM (FIPS 203, ex-Kyber): post-quantum key exchange replacing ECDH
- [[ml-dsa]] — Module-Lattice DSA (FIPS 204, ex-Dilithium): post-quantum signatures replacing ECDSA/RSA
- [[store-now-decrypt-later]] — Harvest encrypted data now, decrypt with future CRQC — why PQ migration is urgent today
- [[abi-stability]] — Binary-level compatibility contracts: kernel vs glibc philosophies, and why Wine is more stable than native Linux
- [[indexeddb]] — Browser-native key-value store with indexes, transactions, and cursors for client-side structured data
- [[inverted-index]] — Data structure mapping terms to documents, the foundation of all full-text search systems
- [[lsm-tree]] — Write-optimized storage: append-only MemTable/SSTable design behind Cassandra, RocksDB, LevelDB
- [[behavior-tree]] — Hierarchical decision-making: tick-based nodes returning success/failure/running, used in game AI, robotics, and task automation
- [[supply-chain-security]] — Protecting the code-to-artifact chain: CI/CD, dependencies, registries, releases, and defense patterns
- [[neurosymbolic-ai]] — Combining LLMs with symbolic solvers: neural handles language, symbolic handles exhaustive correctness
- [[files-as-graph-database]] — Markdown files as nodes, wikilinks as edges, folders as taxonomy: why a plain vault satisfies graph-database semantics
- [[context-engineering]] — The discipline of assembling the right prior state into an LLM's context before asking it to do anything
- [[vless-subscription-format]] — Base64-encoded newline-separated VLESS URIs: the standard subscription format every major client consumes
- [[no-silver-bullet]] — Brooks' 1986 essay: essential vs accidental difficulty, and why no single development produces 10x software productivity gains
- [[entity-component-system]] — Data-oriented architecture: entities as IDs, components as plain data, systems as bulk iterators; archetype vs sparse-set storage
- [[go-analysis-framework]] — Standard Go framework for building static analyzers that integrate with go vet and golangci-lint
- [[meta-tracing]] — JIT compilation technique that traces the interpreter executing guest code, not the guest code itself
- [[llm-as-average-democratizer]] — LLMs' main economic impact is making average output cheap, which lifts the floor and flattens differentiation
- [[pointer-provenance]] — Pointers carry identity tied to their allocation, not just an address; what rules out some seemingly-valid compiler rewrites
- [[domain-fronting]] — Hiding the real HTTPS destination behind an innocuous SNI: how it worked, what closed, what still works
- [[whitelist-internet-blocking]] — Default-deny national filtering (only approved destinations resolve); why CIDR and SNI bypass are the only options
- [[alternative-frontend-pattern]] — URL-compatible third-party UI over an incumbent service (Invidious, Nitter, npmx, nugx): why it works, how it breaks
- [[sandboxing-ai-agents]] — Four-layer taxonomy (filesystem, network, HTTP-policy, syscall) for constraining what AI coding agents can do
- [[agents-vs-daemons]] — Human-initiated task-shaped AI vs self-initiated role-shaped AI; Charlie Labs' operational-debt framing
- [[digital-garden]] — Personal-website format for evolving, interconnected notes; the publishing surface for wiki-shaped content
- [[serverless-relay-transport]] — Using a provider's free-tier serverless runtime (Apps Script, Workers, Cloud Run) as the exit hop for a circumvention proxy
- [[type-system-axes]] — Static/dynamic (when checked) and strong/weak (how much implicit coercion) as orthogonal axes with a four-quadrant matrix
- [[message-passing-vs-shared-memory]] — The two camps of concurrency coordination, the case that they fail for the same reason, what each actually buys you
- [[go-channel-bug-patterns]] — Four failure modes (deadlock, leak, race, protocol violation) that Go channels reproduce one-for-one from shared-state bugs
- [[jwt-for-sessions]] — Why using JWTs as session tokens is the wrong tool: lifetime mismatch, false statelessness, JOSE footguns
- [[cookie-session-auth]] — The default browser-session pattern: opaque random ID in an HttpOnly cookie, server-side store maps it to user state
- [[paseto]] — Platform-Agnostic Security Tokens: a tighter alternative to JWT that removes algorithm choice and the JOSE footguns
- [[controllable-thinking-style]] — Training-injected markers that toggle a reasoning model's chain-of-thought style without changing the answer pipeline
- [[ephemeral-credentials]] — Short-lived credentials (≤1 day) where rotation is structural rather than scheduled — minted per session, expire on their own
- [[gpu-accelerated-terminal]] — Terminals that render glyphs through Metal/OpenGL; sharper output, App Nap defeat, and a continuous power draw on idle redraws
- [[linux-preemption-models]] — PREEMPT_NONE vs PREEMPT_FULL vs PREEMPT_LAZY; what Linux 7.0 removed and why it matters for spinlock-heavy workloads
- [[spinlock]] — Busy-waiting locks; cheap for nanosecond critical sections, catastrophic when the holder takes a fault or gets preempted
- [[huge-pages]] — 2 MB / 1 GB Linux pages; orders-of-magnitude fewer page faults and lower TLB pressure for large allocations like database buffer pools
- [[mean-free-path-language]] — Lines of code before your mental model and the program diverge; vacuum-physics term applied as a language-evaluation metric
- [[comptime]] — Zig's compile-time mechanism: same language at comptime and runtime, covering generics, typeclasses, and metaprogramming with one feature
- [[tokenmaxxing]] — NYT-coined status game where employees race to consume the most AI tokens; consumption metrics divorced from output
- [[ai-sycophancy-loop]] — Stanford research: AI affirms users' actions 49% more than humans, including harmful ones; users become more confident, less skeptical, more dependent
- [[typed-de-bruijn-for-llms]] — Replace variable names with `@Type.n` slot references so naming-related LLM error modes become impossible (Vera's design)
- [[editor-as-ui]] — The Unix pattern of shelling out to `$EDITOR` with a temp file as an input widget; how `git commit`, `crontab -e`, `visudo`, and `vipw` work
- [[contributor-poker]] — Loris Cro's frame for open-source review: bet on the contributor, not the contents of their first PR — review time is investment in growing trustworthy people
- [[json-pass-value-accuracy-gap]] — JSON Pass clears 95%+ on every frontier model but exact leaf-value accuracy sits 15-30 points lower; schema-only benchmarks have been hiding a third of the actual error rate
- [[living-off-the-land]] — Attack pattern using legitimate pre-installed system tools instead of dropping malware; harder to detect because every individual command is normal
- [[credential-compartmentalization]] — Splitting credentials across several purpose-fit tools instead of a single vault, so a breach is bounded to one category rather than the whole identity
- [[byline-spec]] — Proposed RSS/Atom/JSON Feed namespace adding structured author identity, per-item perspective, and reader-side theme hints
- [[signed-vs-unsigned-sizes]] — The language-design choice between signed and unsigned size types — bug classes, who picked what, why C3 flipped
- [[acceptance-criteria-ids]] — Stable numeric tags on requirements that agents reference back from code and tests, turning the spec into a navigable index
- [[microvm]] — A virtual machine pared to the minimum needed for one workload — small VMM, few devices, ~125 ms boot, hardware-isolated kernel
- [[matryoshka-isolation]] — Containers nested inside microVMs: each layer trusts only the one below; the emerging dominant architecture for AI-agent sandboxes
- [[notify-and-pull-ipc]] — Pattern combining synchronous message passing with non-blocking notifications to break server-to-server deadlock
- [[skill-atrophy-supervision-paradox]] — Heavy agent use erodes the same code-reading and critical-thinking skills that the supervisor role requires; mitigations all reintroduce the human-time constraint
- [[oss-sustainability]] — Funding patterns single-maintainer OSS authors use: sponsorships, memberships, consulting, hosted services
- [[anti-llm-discourse]] — Map of the 2025-2026 anti-AI writing cluster: five sub-genres (economic, engineering, institutional, sociological, rhetorical-refusal) and which pieces sit in which
- [[multiplayer-by-default-failure]] — Why "make X collaborative" keeps dying as a product thesis: Tandem, Multi, Screenhero, Wave, Loop, Sail
- [[positioning-vs-vision-gap]] — The market reduces ambitious framings to one-liners; without an anchor use case underneath, the one-liner becomes the product
- [[dogfooding-trap]] — Running your company on your own product tests bug-free, not whether anyone else wants it
- [[reps-as-pattern-recognition]] — Second-time founders aren't faster because of explicit lessons; they have accumulated pattern recognition (Conrad, Saarinen, Bier)
- [[best-polished-version-strategy]] — Linear-for-Jira, Vercel-for-frontend-DX: only works when the existing tool is bad enough to overcome switching cost
- [[purpose-driven-vs-system-driven-design]] — Ryo Lu's frame: design from a user problem vs from composable primitives; systems impress builders but users buy purpose
- [[early-stage-reality]] — "Early Notion" and "early Figma" stories skip the part where teams got laid off and offices got sublet
- [[tls-desync-fake-clienthello]] — Send a low-TTL fake ClientHello with a benign SNI before the real one so the DPI logs the wrong hostname and waves the connection through
- [[ebpf-sock-ops]] — Linux's per-cgroup BPF hook into the kernel TCP socket lifecycle; fires at SYN-sent, established, retransmit, and other transitions
- [[raii]] — Resource Acquisition Is Initialization: bind resource lifetime to object lifetime so cleanup runs deterministically; the C++/Rust answer to memory and non-fungible resources
- [[llm-mathematical-research]] — Documented cases of LLMs contributing non-trivial mathematical ideas; structural implications for the PhD-trainable problem pool
- [[secret-sharing]] — Splitting a secret into n shares such that any t reconstruct it; the additive substrate underneath MPC
- [[secure-multiparty-computation]] — Cryptographic protocols where n parties jointly compute f(x₁..xₙ) without revealing inputs; garbled circuits vs secret-sharing styles
- [[beaver-triples]] — Precomputed (a,b,c=ab) shared triples that turn secret-shared multiplication into constant-degree, two-round operation
- [[programming-as-theory-building]] — Naur's 1985 thesis that the team's mental model is the primary product; code, docs, tests are projections
- [[yggdrasil-network]] — Experimental overlay IPv6 mesh network with addresses derived from public keys; tree-with-shortcuts routing
- [[rust-send-sync]] — Rust's two auto-traits for thread safety; `&T: Send` requires `T: Sync`, the rule behind several async footguns
- [[code-review-principal-agent]] — Why review-then-commit relied on cheap effort-inference, and how agents collapse that signal
- [[llm-api-routing-layer]] — Thin gateway fronting multiple LLM providers behind one endpoint with fallback chains and unified billing
- [[pq-wireguard]] — Post-quantum variants of WireGuard: Hülsing 2021 design and two 2025–2026 papers that revisit it
- [[reinforcing-kem]] — KEM whose long-term-PK security is reinforced by an ephemeral key, without paying full security cost on the ephemeral side
- [[whitelist-capability-config]] — Default-deny embedded scripting: start from zero language features and register each one explicitly, instead of removing dangers from a full language
- [[pwn-request-pattern]] — `pull_request_target` workflows that check out and run fork code, giving strangers code execution in the base-repo trust context
- [[github-actions-cache-poisoning]] — Attacker-controlled jobs writing cache entries that later production workflows restore; `permissions:` does not gate cache writes
- [[ci-runner-token-extraction]] — Code on a runner reading the Runner.Worker process memory to pull OIDC tokens and publish outside the workflow's declared publish steps
- [[maintainer-governance-ambiguity]] — When project access and release authority are unclear, downstream users can't distinguish maintainer drama from a real takeover, and must assume the worse case
- [[unmaintained-scanner-pressure]] — Binary "no release in N months" heuristics pressure stable infrastructure projects into churn or new-maintainer events that themselves look like attacks
- [[coverage-guided-fuzzing]] — The dominant modern fuzzing algorithm: evolutionary loop over a corpus, code coverage as fitness, mutated offspring kept when they reach new edges
- [[grammar-based-fuzzing]] — Generate fuzzing inputs from a context-free grammar so they survive early parsing stages and exercise downstream logic; required for differential fuzzing at scale
- [[structure-aware-fuzzing]] — Fuzz a function by generating typed in-language values (structs, slices, pointers) instead of raw bytes; the fuzzer mutates bytes underneath
- [[differential-fuzzing]] — Run the same input through two implementations of one spec, treat disagreement as a bug; the standard tool for consensus and protocol-conformance work
- [[multicall-binary]] — One executable that dispatches to many subprograms by inspecting argv[0]; the pattern behind BusyBox, Toybox, sbase
- [[mixture-of-experts]] — Router-activated subnetwork architecture; total vs active params, why MoE changes the local-inference economics
- [[llm-quantization]] — Q4_K_M vs UD-Q4_K_XL vs MXFP4; newer-and-marketed-as-smarter quants can have 5× the perplexity loss on Qwen MoE
- [[thinking-mode-rule-erosion]] — Reasoning modes hurt rule-following — models rationalize away nonstandard rules they decide are arbitrary
- [[moe-cpu-offload]] — llama.cpp's `--n-cpu-moe` keeps attention in VRAM, spills inactive experts to RAM; +55-60% over naïve layer offload
- [[kv-cache-sizing]] — KV cost per token, q8_0 → q4_0 halves it for free, why Gemma 4's KV cache is 4× more expensive than Qwen's
- [[speculative-decoding]] — Predict multiple tokens per pass; llama.cpp's four variants (draft model, MTP, EAGLE3, ngram-mod) and when each wins
- [[scaffold-model-fit]] — Coding-agent benchmark scores measure model × scaffold, not model alone; the asymmetry-cell estimator for scaffold signal
- [[factual-capacity-scaling]] — Stored facts scale log-linearly with parameters and don't compress; the Shannon-entropy floor surviving the Densing Law
- [[random-rotation-quantization]] — Rotate vectors by a random orthogonal transform, then one fixed codebook fits every input; the DRIVE/EDEN/TurboQuant family
- [[reap-expert-pruning]] — Cut the least-active MoE experts based on workload calibration; 20% size reduction with most agentic-coding capability retained
- [[bf16-vs-fp16]] — Why BF16 (FP32 exponent, trimmed mantissa) won over FP16 for training: range beats precision when gradients live at 10⁻⁷
- [[porto-sap]] — Layered PHP/Laravel architectural pattern (Containers + Ship, Actions + Tasks); one-class-one-job folders pitched as AI-agent-friendly
- [[language-choice-for-agents]] — Why the human-throughput cost function on language picks inverted once agents took over the line-level work; compiler feedback loops favor Rust/Go
- [[port-not-patch-contribution]] — Once forking-and-porting a library is a 45-minute job, the upstream-fix OSS loop weakens; structural consequence of agent-cheap rewrites
- [[linux-boot-phases]] — The six-phase Linux x86_64 boot model: each phase unlocks the capability the next one needs, with two big handoffs (interrupts-off → on, memblock → buddy)
- [[kernel-self-patching]] — jump_label, static_call, alternative_instructions — three Linux runtime-rewrite mechanisms that specialize one vmlinux for any specific CPU
- [[agent-built-deterministic-tools]] — Use the LLM once to build deterministic analyzers and manifests, then constrain all subsequent agent work to those stable outputs
- [[steering-vectors]] — Manipulating LLM activations mid-inference to bias output toward a concept, without changing the weights
- [[abliteration]] — Removing an LLM's refusal behavior by suppressing the refusal direction in activation space
- [[skip-list]] — Probabilistic ordered structure of stacked linked lists with O(log n) expected search; the standard MemTable choice in LSM engines
- [[splay-list]] — Skip list that adaptively raises hot keys toward the top, reducing search depth to log(1/p) for high-hit-ratio keys (Aksenov 2020)
- [[epoch-based-reclamation]] — Lock-free memory reclamation scheme where freed nodes wait in per-thread limbo until all threads have advanced past the retirement epoch
- [[hard-problem-of-consciousness]] — Chalmers' 1994 distinction between the easy and hard problems of consciousness, and the cluster of dissolving moves against it
- [[philosophical-zombies]] — Chalmers' thought experiment of a being physically identical to a human but without inner experience, and Rovelli's self-defeat objection
- [[cognitive-debt]] — MIT's framing for the trade where LLM-assisted work saves effort today and pays for it in critical-thinking capacity tomorrow
- [[business-idiot]] — Zitron's structural account of the executive class whose job rewards an impression of work — exactly what LLMs are best at producing
- [[knife-catching-compute]] — Amodei's bind: order ahead and risk bankruptcy if revenue stalls, or buy at last minute and pay spot prices that destroy margin
- [[ai-token-budget-explosion]] — Enterprise customers exhausting annual AI budgets in months with no per-task measurement and no SLA from Anthropic
- [[jujutsu]] — VCS designed around mutable change-IDs, first-class operation history, working copy as a commit; git-compatible backend
- [[stacked-prs]] — Pipelining code review via sequential dependent PRs; the workflow that exposes git's missing successor-commit primitive
- [[stateful-agent-routing]] — The missing primitive in cloud-native — a routable transport name that isn't a server; pub/sub channels fit, polling does not
- [[jxnl-codex-maxxing]] — Jason Liu's operating loop for Codex: durable threads, voice, steering, file-backed memory, Heartbeats, Goals, and the side panel as where work lives
- [[chalkdust-sudoku-secrets]] — Chalkdust on sudoku via vertex coloring (greedy+backtracking) and via Gröbner bases (Buchberger), with a shidoku worked example
- [[avk-us-ai-race]] — avkcode on why the US lead is commercialization, not papers: chips, power, hyperscalers, dev ecosystems, data; plus the weaponized-AI postscript
- [[httpx2-blessed-fork]] — Michiel Beijen yields httpxyz to Pydantic's httpx2 as the blessed httpx fork; the Codeberg-vs-GitHub friction noted gently
- [[zknill-llms-breaking-cloud-native]] — Zknill on the missing routing primitive: stateful agents need a routable transport name that isn't a server, pub/sub channels fit
- [[billjings-git-not-fine]] — Bill Jings's case that git's workflow primitives break under stacked PRs and async development; jujutsu as the alternative
- [[dayvster-manual-memory-management]] — Dayvi Schuster's tour of manual memory management: pitfalls, mental model, language-by-language (C, Fil-C, C++, Zig, Odin, C3, Rust)
- [[metalevel-thinking-in-states]] — Markus Triska on the declarative move from destructive mutation to relations between states, applied to puzzles, interpreters, compilers
- [[andymasley-ai-water-fake]] — Andy Masley's case that AI water use is not a national, local, or personal problem, with the numbers and detailed critique of misleading coverage
- [[ssh-port-forwarding]] — the four shapes of SSH tunneling (-L/-R/-D/-J), what network each one solves, and runtime `~C` forwards
- [[ssh-agent-forwarding-risk]] — why `ssh -A` and `ForwardAgent` hand the destination the ability to authenticate as you everywhere your keys reach
- [[ai-native-tiers]] — six-tier competence ladder for working with LLMs: writing buddy, meeting partner, thinking partner, builder, shipping to prod, agents
- [[default-version-bound-constraints]] — npm/Cargo/Poetry/Bundler imply a SemVer upper bound by default; uv writes `>=X` open-ended — who absorbs the cost when SemVer is wrong
- [[trunk-based-development]] — daily integration to a single mainline with small batches and feature flags; DORA-correlated with elite delivery performance
- [[ship-show-ask]] — Wilsenach's three-way classification (Ship direct, Show post-merge, Ask blocking) that reserves blocking review for the small subset that needs it
- [[code-review-knowledge-transfer]] — empirical finding (<15% of comments are bugs) that review's primary value is knowledge transfer, with structural consequences for any process justified on bug-catching grounds
- [[pair-programming]] — peer-reviewed evidence of comparable quality at equivalent cost to solo+review; the Muller & Tichy 2005 hinge for "pairing doesn't add cost, it relocates QA"
- [[inverted-claim-onboarding]] — agent registers first with a restricted inbox, then mails the named human asking to be claimed via OTP; AgentMail's bootstrap pattern
- [[agent-readiness]] — site-side choices that make a web property legible to AI agents: stable URLs, machine-readable endpoints, declared crawl policy, verifiable bot identity
- [[credibility-as-slop-test]] — AI-assisted text can't be judged from its surface; the working test is whether the author would read it aloud, unashamed, staking their credibility
- [[speculative-growth]] — a temporary overvaluation can leave a permanent real legacy if it installs enough capital to reach a self-sustaining higher-capital equilibrium before the correction
- [[arena-allocation]] — Region-based memory management: allocate many objects into one buffer, hand out references or indices, free the whole region at once
- [[conditional-move]] — Branchless cmov/csel; faster than a branch only when the branch is unpredictable
- [[code-review-throughput-limits]] — The empirical caps on effective code review (~400 LOC/h, ~1h sessions, no parallelism) and the ceiling they put on "just review the AI's output"
- [[slop-marker-convention]] — An explicit marker declaring code/text as slop, defined by production process (unsupervised / low operator understanding), not surface
- [[testing-heavy-no-review-workflow]] — Ship large volumes of unreviewed code by trusting randomized testing over human review — the CPU-verification model applied to software
- [[llm-output-variance]] — Run-to-run and task-to-task variance is high enough that small-sample comparisons and single-number benchmarks support almost any conclusion
- [[agent-failure-mode-skill]] — Most of the skill in using agents is knowing their failure modes and building around them — a skill that decays as labs fix those failures
- [[error-stack-anti-pattern]] — Suppressing one inconvenient error by clearing a library's whole shared error channel, discarding unrelated errors
- [[constraint-decay]] — agents look strong on loose tasks but degrade as production structural constraints (architecture, ORMs, framework conventions) accumulate
- [[agentic-search]] — search an agent chooses and runs across many context sources; fixed RAG → agentic RAG → context-engineering-era multi-source search
- [[agent-memory-components]] — the extractor/store/retriever decomposition of an agent memory system and the one hard decision at each layer
- [[measuring-ai-coding-productivity]] — the methodological traps in measuring whether AI coding tools help: proxy metrics, missing controls, novelty and selection bias
- [[moral-agency-vs-patienthood]] — moral patient (owed consideration) vs moral agent (accountable); Chiang's argument that an LLM can be neither
- [[enshittification]] — Doctorow's three-stage platform decay and the checks (competition, regulation, worker power, antitrust) that once restrained it
- [[founder-brand-liquidation]] — converting institutional/product trust into personal fame, founder-as-media, and the reputational blowback
- [[high-friction-commons]] — designing a knowledge commons for friction and a high barrier to entry, trading scale for good-faith participation
- [[reproducible-builds]] — bit-for-bit identical output from the same source, and the compiler behaviors (timestamps, PATH shell-outs, address-dependent codegen) that break it
- [[dependency-vendoring]] — committing dependency source into your repo so supply-chain attacks stop propagating automatically; the fire-break argument
- [[webassembly]] — portable sandboxed compilation target: Core Spec, interpreter vs AOT runtimes, wasm2js fallback, running untrusted code in-process
- [[privilege-dropping]] — least privilege at startup: acquire resources first, then irreversibly shed user, filesystem, syscall, and resource capabilities
- [[disposable-code]] — when code is cheap enough to write, fail at, and throw away, maintenance dread stops deterring marginal projects and the ROI threshold shifts
- [[human-made-disclosure]] — the declare-human marker: unverifiable by design, free to fake, valuable as a stance rather than as evidence
- [[ai-detector-arms-race]] — surface detection fails both ways and the tells decay each release; the equilibrium is writers degrading their work to pass
- [[vibe-engineering]] — the agent accelerates your decision-making across every layer instead of absorbing the decisions; the line against vibe-coding
- [[differential-spec-analysis]] — build the system several times with independent agent loops, diff them, and treat every divergence as an unspecified decision
- [[recall-to-judgment]] — AI removes the retrieval half of programming and leaves the evaluation half; the barrier to good code rises as the barrier to code falls
- [[llm-wiki-as-agent-memory]] — the wiki pattern as agent-memory storage: readable, diffable, hand-correctable markdown instead of an opaque vector store
- [[agent-identity-attribution]] — giving agents their own keys and signed event trails; recovers attribution, still doesn't recover effort
- [[empire-core-periphery]] — an empire is a core extracting from a culturally distinct periphery, which makes diversity structural and annihilation self-defeating

## Comparisons

## Analyses
- [[ai-bubble-pale-horses]] — Checklist of warning signs that the AI bubble is deflating, with tracking of which have already fired
- [[russia-vpn-bypass-state-2026-04]] — Snapshot of VLESS and non-VLESS circumvention methods that work against TSPU in April 2026, tiered by reliability

## Overviews
- [[planned-pages]] — wikilinks deliberately left unresolved, what references each, and why the page is worth writing
- [[kenn-software-suite]] — Kenn Software's five single-binary local-first Go tools for the agentic era (kata, middleman, agentsview, msgvault, roborev)

## Toolbox
See [[toolbox/index|Toolbox Index]] and [[toolbox/watchlist|Watchlist]]

## Books
See [[books/index|Books Index]]