Wiki

507 pages hand-written catalog

analysis 2

concept 186

  • ABI Stability Binary-level compatibility contracts: kernel vs glibc philosophies, Wine as the stable option
  • Abliteration Removing an LLM's refusal behavior by identifying and suppressing the refusal direction in activation space
  • Acceptance Criteria IDs (ACIDs) Stable numeric tags on requirements that agents reference back from code and tests, turning the spec into a navigable index of where requirements live
  • Agent Memory Components (Extractor / Store / Retriever) The three-part decomposition of an agent memory system and the one hard decision at each layer
  • Agent readiness Site-side choices that make a web property legible to AI agents β€” stable URLs, machine-readable endpoints, declared crawl policy, verifiable bot identity
  • Agent-built deterministic tools Use the LLM to build deterministic analyzers and manifests once, then constrain all subsequent agent work to those stable outputs
  • Agent2Agent Protocol (A2A) Google's open protocol for cross-framework, cross-language agent communication
  • Agentic Search Search an agent decides when and how to run, across many context sources each with its own native search tool
  • Agents as first-class identities Giving agents their own key pairs and signed event trails instead of running them through a shared bot account β€” attribution survives, but effort still doesn't
  • Agents vs Daemons Human-initiated AI that builds things vs self-initiated AI that maintains them β€” roles, not tasks
  • AI detector arms race Surface-based AI detection fails in both directions, the tells change every model release, and the stable equilibrium is writers degrading their work to pass
  • AI Subsidy Economics How every link in the AI chain runs on subsidies, from GPU sales to consumer subscriptions
  • AI sycophancy loop Stanford research showing AI models affirm users' actions 49% more than humans do, and that exposure makes users more confident, less skeptical, and more dependent
  • AI Token Budget Explosion Enterprise customers exhausting annual AI token budgets in months β€” Uber, ServiceNow, Salesforce, Stripe, Zillow β€” with no usable per-task measurement and no SLA
  • AI-Native Tiers Six-tier competence ladder for working with LLMs β€” writing buddy, meeting partner, thinking partner, builder, shipping to prod, agents
  • Alternative Frontend Pattern URL-compatible third-party UI over an incumbent service, built to route around stagnation or policy without forking the backend
  • Anti-LLM Discourse The 2025-2026 cluster of public anti-AI / anti-LLM writing β€” its sub-genres, who occupies which slot, and what each is actually arguing
  • Arena allocation Region-based memory management β€” allocate many objects into one buffer, hand out references or indices, free the whole region at once
  • Beaver Triples Precomputed (a, b, c=ab) triples in shared form that turn secret-shared multiplication into a constant-degree, two-round operation
  • Behavior Tree Hierarchical decision-making: tick-based nodes for game AI, robotics, and task automation
  • Best polished version strategy Linear-for-Jira, Vercel-for-frontend-DX β€” building the last version of a known category only works when the existing tool is bad enough to overcome switching cost
  • BF16 vs FP16 BF16 keeps FP32's 8-bit exponent and shrinks the mantissa; FP16 shrinks the exponent and keeps the mantissa β€” for neural training, range beats precision
  • Business Idiot Zitron's framing for the executive class whose job structure rewards an impression of work β€” exactly what LLMs are best at producing
  • Byline (RSS/Atom/JSON Feed extension) Proposed RSS/Atom/JSON Feed extension that adds structured author identity, per-item perspective, and reader-side theme hints
  • Byzantine Fault Failure mode where a node produces wrong output while appearing functional
  • CI Runner Token Extraction Code on a CI runner reads the runner-process memory to extract OIDC tokens for direct registry use
  • Code Review as a Principal-Agent Problem Why review-then-commit relied on cheaply-inferable effort signals from contributors; how agents collapse that signal and what it means for review processes
  • Code review throughput limits The empirical caps on effective code review (~400 LOC/h, ~1h sessions, no parallelism) and why they put a hard ceiling on "just review the AI's output"
  • code-review-knowledge-transfer Empirical finding that <15% of code review comments are about bugs β€” review's primary value is knowledge transfer, awareness, and alternative solutions, not defect detection
  • Cognitive Debt MIT's framing for the trade where LLM-assisted work saves effort today and pays for it in critical-thinking capacity tomorrow
  • Conditional move (cmov / csel) A branchless instruction that picks one of two values from a flag; faster than a branch only when the branch is unpredictable
  • Constraint Decay LLM coding agents look strong on loosely specified tasks but degrade sharply as production structural constraints accumulate
  • Context Engineering Assembling the right prior state into an LLM's context before asking it to do anything
  • Contributor Poker Loris Cro's framing for open-source review: bet on the contributor, not the contents of their first PR β€” review time is investment in growing trustworthy people, which LLM-authored PRs can't return
  • Controllable Thinking Style Training-injected markers that toggle the style of a reasoning model's chain-of-thought without changing the answer pipeline
  • Cookie Session Authentication The default browser-session pattern: opaque random ID in an HttpOnly cookie, server-side store maps it to user state
  • Coverage-Guided Fuzzing The dominant modern fuzzing algorithm β€” evolutionary loop over a corpus of test cases, fitness measured by code coverage, mutated offspring kept when they reach new coverage
  • Credential Compartmentalization Splitting credentials across several purpose-fit tools instead of a single vault, so a breach is bounded to one category rather than the whole identity
  • Credibility as the slop test Whether AI-assisted text is slop can't be judged from its surface β€” the only working test is whether the author would read it aloud, unashamed, staking their credibility
  • Cryptographically Relevant Quantum Computer (CRQC) Cryptographically relevant quantum computer: what it is, threshold, April 2026 timeline collapse
  • Default version bound constraints Whether a package manager's `add` command writes a SemVer-respecting upper bound by default, and the consequences when it doesn't
  • Dependency Vendoring Committing dependency source into your repo as a fire-break against automatic propagation
  • Differential Fuzzing Run the same input through two implementations of the same spec and treat disagreement as a bug; finds spec-conformance issues neither implementation would catch alone
  • Differential spec analysis Build the same system with several independent agent loops, diff the finished implementations, and treat every divergence as a decision nobody specified
  • Digital Garden Personal-website format optimized for evolving, interconnected notes rather than chronological posts
  • Disposable code When code is cheap enough to write, fail at, and throw away, maintenance dread stops deterring marginal projects and the ROI threshold shifts
  • Distributed Consensus Getting multiple processes to agree on a value: Paxos, Raft, PBFT, and the tradeoff space
  • Domain Fronting Hiding the real destination of an HTTPS request behind a different, high-reputation SNI
  • Early-stage reality vs the retold version "Early Notion" and "early Figma" stories skip the messy parts; what early actually looks like is a sequence of bets that mostly don't work, made by people who are mostly uncertain
  • eBPF sock_ops Linux's per-cgroup BPF hook into the kernel TCP socket lifecycle β€” fires at SYN-sent, established, retransmit, and other transitions
  • Editor-as-UI pattern Shelling out to $EDITOR with a temp file as a lightweight middle ground between CLI flags and a full TUI
  • Empire as core and periphery An empire is a state whose core extracts resources from a culturally distinct periphery β€” which makes diversity structural, hierarchy permanent, and annihilation self-defeating
  • Enshittification Doctorow's term for the three-stage decay of platforms, once held in check by antitrust, competition, and worker power
  • Entity Component System Data-oriented architecture with entities as IDs, components as data, systems as bulk iterators
  • Ephemeral Credentials Short-lived credentials (≀1 day) where rotation is structural rather than scheduled β€” minted per session, expire on their own
  • Epoch-based reclamation Lock-free memory reclamation scheme where freed nodes wait in per-thread limbo until all threads have advanced past the retirement epoch
  • Error-stack discard anti-pattern Suppressing one inconvenient error by clearing a library's entire shared error channel, silently discarding unrelated errors that belong to other code
  • Factual Capacity Scaling Stored factual knowledge scales log-linearly with parameters and does not compress β€” the Shannon-entropy floor that survives the Densing Law
  • Files as Graph Database Markdown files as nodes, wikilinks as edges β€” why a plain vault satisfies graph-database semantics
  • FLP Impossibility Proven 1985 result: no deterministic consensus in async systems with even one crash
  • Founder Brand Liquidation Tech leaders converting accumulated product and institutional trust into personal fame, and the reputational blowback that follows
  • GitHub Actions Cache Poisoning Attacker-controlled job writes cache entries that production workflows later restore
  • Go Channel Bug Patterns Four failure modes (deadlock, leak, race, protocol violation) that channels reproduce one-for-one from shared-state bugs
  • go/analysis Framework Standard Go framework for building static analyzers that integrate with go vet and golangci-lint
  • Google OAuth domain-takeover flaw (Truffle Security, Jan 2025) Buying a dead startup's domain for $12 lets you re-create old employee emails on Workspace and log into the dead company's Slack/Notion/Zoom via "Sign in with Google" β€” initially marked won't-fix, $1,337 bounty after public pressure
  • GPU-accelerated terminal Terminal emulators that render glyphs through the GPU; the tradeoff is latency and crispness against power draw
  • Grammar-Based Fuzzing Generate fuzzing inputs from a context-free grammar instead of random bytes, so inputs survive early parsing stages and exercise downstream logic
  • Hard Problem of Consciousness David Chalmers' 1994 framing of consciousness as having two distinct problems, and Rovelli's case that the "hard" problem is a category error
  • High-Friction Commons Designing a knowledge commons for a high barrier and deliberate friction, trading scale for good-faith participation and spam resistance
  • Huge pages 2 MB / 1 GB Linux memory pages instead of the 4 KB default β€” fewer page faults, far less TLB pressure, at the cost of upfront reservation
  • Human-in-the-Loop Design pattern where AI agents pause for human approval on sensitive operations
  • Human-made disclosure The declare-human marker β€” a footer line, signature, or store label asserting no AI was used; unverifiable by design, valuable as a stance rather than as evidence
  • Hybrid Search Combining BM25 keyword search with embedding similarity for better retrieval
  • IndexedDB Browser-native key-value store with indexes, transactions, and cursors for client-side data
  • Individual Engineer Agency The gap between individual engineering quality and product-level user perception
  • Inverted claim onboarding Onboarding pattern where the AI agent registers first and a human "claims" it via OTP; until then, the agent has a one-recipient cap
  • Inverted Index Data structure mapping terms to documents, the foundation of all full-text search systems
  • JSON-Pass vs Value-Accuracy Gap For LLM structured output, JSON parse rate clears 95%+ on every frontier model, but exact leaf-value accuracy sits 15-30 points lower β€” schema-compliance benchmarks have been hiding a third of the actual error rate
  • Jujutsu (jj) jj-vcs/jj β€” VCS designed around mutable change-IDs, first-class operation history, and explicit modeling of working-copy state as a commit
  • JWT for Sessions (Anti-Pattern) Why using JWTs as session tokens is the wrong tool β€” lifetime mismatch, false statelessness, spec footguns, and what to use instead
  • Kernel self-patching Three Linux runtime-rewriting mechanisms β€” jump_label, static_call, alternative_instructions β€” that let one vmlinux boot optimally on dozens of CPU generations
  • Knife-Catching Compute The Dario Amodei dilemma β€” order compute years ahead and risk bankruptcy if revenue doesn't materialise, or buy at last minute and pay spot prices that destroy margin
  • KV Cache Sizing KV cache memory per token = 2 Γ— KV-heads Γ— head-dim Γ— layers Γ— bytes/element; halving via q4_0 lets you double context for free
  • Language Choice for Agents The proposed inversion of language-pick economics once agents write most code β€” strong types, fast check loops, and compiler-error feedback favor Rust/Go over Python/TS
  • Limitations of Naive RAG Failure modes of naive top-K retrieval that motivate richer agent access patterns
  • Linux boot phases The six-phase x86_64 Linux boot model β€” assembly trampoline, early C, setup_arch, start_kernel, rest_init, kernel_init β€” each phase unlocking the capabilities the next one needs
  • Linux preemption models PREEMPT_NONE, PREEMPT_FULL, and PREEMPT_LAZY β€” when the kernel is allowed to take the CPU away from a running thread
  • Living Off The Land Attack pattern where an intruder uses legitimate, pre-installed system tools (shells, interpreters, package managers, debuggers) instead of dropping malware β€” harder to detect because every individual command is normal
  • LLM API Routing Layer A thin gateway that fronts multiple LLM providers behind one endpoint, with fallback chains, model selection rules, and unified billing
  • LLM as Average Democratizer The argument that LLMs' main economic impact is making "average" output cheap, lifting the floor without raising the ceiling
  • LLM output variance Run-to-run and task-to-task variance in LLM/agent output is high enough that small-sample comparisons and single-number benchmarks support almost any conclusion
  • LLM Quantization Formats Q4_K_M vs UD-Q4_K_XL vs MXFP4 β€” three approaches to 4-bit weight compression, with the perplexity gap that newer β‰  better
  • LLM Wiki as agent-memory substrate Karpathy's wiki pattern is being adopted as the storage layer for agent memory products β€” markdown you can read and grep, instead of an opaque vector store
  • LLM Wiki Pattern LLM incrementally builds and maintains a persistent wiki from raw sources
  • LLM-assisted mathematical research Documented cases where LLMs contribute non-trivial mathematical ideas, and what that does to the research-training pipeline
  • llms.txt Proposed /llms.txt convention for giving LLMs a curated markdown overview of a website
  • LSM Tree Write-optimized storage: append-only MemTable/SSTable design behind Cassandra, RocksDB, LevelDB
  • Maintainer Governance Ambiguity When a project's maintainer roles and release authority are unclear, downstream users can't distinguish takeover from drama β€” and have to assume the worse possibility
  • Matryoshka Isolation (Containers Inside VMs) The defense-in-depth pattern where each isolation layer trusts only the layer below β€” host kernel, VMM, guest kernel, container runtime, untrusted code
  • Mean-free path of a language How many lines of code you can write before your mental model and the actual program diverge β€” borrowed from vacuum-system physics as a language-evaluation metric
  • Measuring AI Coding Productivity The recurring methods failures that make most claims about whether AI coding tools help unreliable β€” proxy metrics, missing controls, novelty, selection, systems confusion
  • Memory Conflict Detection Detecting contradictory knowledge and keeping both visible instead of silently overwriting
  • Memory Decay in AI Agents Memory half-life, retrieval strengthening, and consolidation for AI agents
  • Message Passing vs Shared Memory The two camps of concurrency coordination, the case that they fail for the same reason, and what each actually buys you
  • Meta-Tracing JIT compilation technique that traces the interpreter executing guest code, not the guest code itself
  • MicroVM A virtual machine pared down to the minimum needed to run a single workload β€” small VMM, few emulated devices, fast boot, hardware-isolated kernel
  • Mixture of Experts (MoE) Architecture where a router activates a small subset of "expert" subnetworks per token β€” splits total params from compute params and changes the local-inference economics
  • ML-DSA Module-Lattice DSA (FIPS 204, ex-Dilithium): post-quantum signatures replacing ECDSA/RSA
  • ML-KEM Module-Lattice KEM (FIPS 203, ex-Kyber): post-quantum key exchange replacing ECDH
  • MoE CPU Offload (`--n-cpu-moe`) llama.cpp's MoE-aware offload β€” keep attention in VRAM, push inactive expert weights to system RAM via PCIe; +55-60% over naΓ―ve layer-based offload
  • Moral Agency vs Moral Patienthood The distinction between something owed moral consideration and something accountable for its actions, applied to LLMs β€” Chiang's claim that a software agent can be neither
  • Multicall binary One executable that dispatches to many built-in subprograms by inspecting argv[0]; the design pattern behind BusyBox, Toybox, sbase, and many minimal Unix userlands
  • Multiplayer-by-default failure pattern Why "make X collaborative" as a product thesis keeps dying β€” work is more siloed than the people building collaboration tools want to believe
  • Neurosymbolic AI Combining LLMs with symbolic solvers for language understanding plus exhaustive correctness
  • No Silver Bullet Brooks' 1986 essay on essential vs accidental difficulty and why no 10x productivity gain exists
  • Notify-and-Pull IPC Pattern that combines synchronous message passing with non-blocking notifications to avoid server-to-server deadlock
  • OAuth token theft (multilogin + consent phishing) Two post-password-reset attack classes against Google OAuth β€” refresh-token replay via the undocumented multilogin endpoint, and consent phishing that asks for authorization instead of authentication. Password and 2FA changes don't stop either.
  • Obsidian Bases Obsidian's built-in database views over frontmatter β€” YAML filters, formulas, and table views, used here as the vault's maintenance dashboard
  • OSS sustainability Funding patterns single-maintainer OSS authors use to keep working on their projects β€” sponsorships, memberships, consulting, hosted services
  • pair-programming Two developers working the same code at the same time β€” peer-reviewed evidence of comparable quality at equivalent cost to solo+review, strongest benefit on complex tasks and for junior developers
  • PARA Method Organize everything by actionability: Projects, Areas, Resources, Archive
  • PASETO Platform-Agnostic Security Tokens β€” a tighter alternative to JWT that removes algorithm choice and the JOSE footguns
  • Patch β†’ Port (the New Unit of OSS Contribution) Ronacher's MiniJinja Rustβ†’Go port for 45 human-minutes and $60 β€” and the structural consequence that the OSS upstream-fix loop weakens as fork-and-port gets cheap
  • Philosophical Zombies Chalmers' thought experiment of a being physically identical to a human but without inner experience, and Rovelli's self-defeat objection
  • Pointer Provenance The idea that a pointer carries not just an address but an identity tied to the allocation it was derived from, which compilers must respect
  • Porto SAP Layered PHP/Laravel-oriented architectural pattern β€” Containers (per-domain business logic) + Ship (shared infrastructure), Actions orchestrating single-`run()` Tasks, every artifact in its own class and predictable folder
  • Positioning vs vision gap The market reduces ambitious product framings to short descriptions; without an anchor use case underneath, the simple description becomes the actual product
  • Post-Quantum Cryptography PQ algorithms, NIST standards, migration priorities, and what's not threatened
  • PQ-WireGuard Post-quantum variants of the WireGuard VPN protocol β€” the original HΓΌlsing 2021 design and two 2025–2026 papers that revisit it
  • Privilege Dropping Least privilege applied at startup β€” acquire resources, then irreversibly shed capabilities so a later compromise is contained
  • Programming as Theory Building Naur's 1985 thesis that the primary product of programming is the team's shared mental model; code, docs, and tests are artifacts in service of that theory
  • Progressive Summarization Layered note distillation technique: compress a little more each time you revisit
  • Purpose-driven vs system-driven design Two design philosophies β€” start from a user problem (purpose) or from composable primitives (system); systems impress builders but users buy purpose
  • Pwn Request Pattern GitHub's `pull_request_target` running fork-controlled code in the base repo's permission context
  • RAII Resource Acquisition Is Initialization β€” bind resource lifetime to object lifetime so cleanup runs deterministically when the object goes out of scope
  • Random-Rotation Quantization Rotate vectors by a random orthogonal transform, then quantize each coordinate against a fixed codebook β€” outliers dissolve, no per-block metadata, one codebook fits all inputs
  • Reactive Signals Reactive primitive for automatic state propagation, now the dominant model in JS frameworks
  • REAP β€” Router-weighted Expert Activation Pruning Cut the least-active experts from an MoE model based on a target-domain calibration dataset; 20% size reduction with most agentic-coding capability retained
  • Recall-to-judgment shift AI moves programming's cognitive burden from retrieving syntax and patterns to evaluating whether generated output is correct and appropriate β€” relocation, not reduction
  • Reinforcing KEM (RKEM) A KEM whose long-term public key security can be reinforced by an ephemeral public key, without paying full security cost on the ephemeral side
  • Reproducible Builds Bit-for-bit identical output from the same source, and why compilers keep breaking it
  • Reps as pattern recognition What second-time founders actually have isn't lessons explicitly learned but accumulated pattern recognition that makes them faster β€” petri-dish process over single-idea conviction
  • Rust Send and Sync The two auto-traits that govern thread safety in Rust; `Send` for cross-thread move, `Sync` for cross-thread shared reference, with `&T: Send` ⇔ `T: Sync`
  • Sandboxing AI Agents Taxonomy of approaches for constraining what an AI coding agent can do β€” OS isolation, network policy, syscall filtering, HTTP interception
  • Scaffold-Model Fit Coding-agent benchmark scores measure model Γ— scaffold, not model alone β€” small local models inherit responsibilities the scaffold assumed they'd self-manage
  • Secret Sharing Splitting a secret into n shares such that any t reconstruct it and fewer than t learn nothing; the additive substrate underneath MPC
  • Secure Multiparty Computation Cryptographic protocols where n parties jointly compute f(x₁,...,xβ‚™) without revealing their inputs; the output is the only thing learned
  • Serverless Relay Transport Using a cloud provider's free-tier serverless runtime (Apps Script, Workers, Cloud Run) as the exit hop for a circumvention proxy
  • ship-show-ask Wilsenach's three-way classification of changes β€” Ship (merge directly), Show (merge then review), Ask (open PR and wait) β€” that reduces the proportion of work needing blocking review
  • Signed vs Unsigned Sizes The language-design choice between signed and unsigned size types β€” the bug classes each enables, and the languages that picked each side
  • Skill atrophy and the supervision paradox The circularity where agent oversight requires the critical-thinking and code-reading skills that heavy agent use measurably erodes
  • Skip list Probabilistic ordered structure of stacked linked lists with O(log n) expected search; the standard MemTable choice in LSM engines
  • Slop-marker convention The idea of an explicit, machine-and-human-readable marker declaring code (or text) as slop β€” defined by its production process, not its surface
  • Speculative Decoding Predict multiple tokens per forward pass, verify in batch β€” four llama.cpp variants (draft model, MTP, EAGLE3, ngram-mod) trade off draft quality, memory, and applicability
  • Speculative growth A temporary, unsustainable overvaluation can leave a permanent real legacy β€” if it installs enough capital to push the economy into a self-sustaining higher-capital equilibrium before the correction arrives
  • Spinlock Locking by busy-waiting in a tight loop instead of sleeping; cheap when critical sections are short, catastrophic when they aren't
  • Splay list Skip list that adaptively raises hot keys toward the top, reducing search depth to log(1/p) for high-hit-ratio keys (Aksenov 2020)
  • SSH agent forwarding risk Why ssh -A (and the ForwardAgent config keyword) hand the destination host the ability to authenticate as you anywhere your loaded keys reach
  • SSH port forwarding The four shapes of SSH tunneling β€” local (-L), remote (-R), dynamic SOCKS (-D), and jumphost (-J) β€” and which network shape each one solves
  • SSO concentration risk SSO trades distributed risk for concentrated risk β€” same expected loss in theory, dramatically worse failure mode in practice when the IdP terminates the relationship
  • Stacked PRs Pipelining the code-review process by submitting sequential dependent PRs simultaneously; the workflow that exposes git's missing successor-commit primitive
  • Stateful agent routing primitive The missing piece in cloud-native architecture for talking to a specific durable process β€” a routable transport name that isn't a server, well-fit to pub/sub channels
  • Steering Vectors Manipulating LLM activations mid-inference to bias output toward a concept, without changing the weights
  • Store-Now-Decrypt-Later Harvest encrypted data now, decrypt with future CRQC β€” why PQ migration is urgent today
  • Structure-Aware Fuzzing Fuzz a function by generating valid in-language values (structs, slices, pointers) instead of raw bytes; the fuzzer mutates bytes underneath and the runtime handles encode/decode
  • Supply Chain Security Protecting code-to-artifact chain: CI/CD, dependencies, registries, releases, defense patterns
  • TC39 Proposal Signals Stage 1 proposal to add native Signal primitives to JavaScript
  • TCP Congestion Control How TCP throttles sending speed to prevent network collapse, and why the first RTT is ~13 kB
  • Testing-heavy, no-review workflow Ship large volumes of unreviewed (including agent-generated) code by trusting randomized testing over human code review β€” the CPU-verification model applied to software
  • The dogfooding trap Running your company on your own product tests whether it's bug-free, not whether anyone else wants it; you understand every concept because you invented every concept
  • Thinking-Mode Rule Erosion Reasoning modes degrade rule-following β€” when models "think," they evaluate whether contextual rules are load-bearing and skip the ones they decide are arbitrary
  • TLS Desync via Fake ClientHello Send a low-TTL fake ClientHello with a benign SNI before the real one, so the DPI logs the wrong hostname and waves the connection through
  • Tokenmaxxing NYT-coined term for the status game of consuming the most AI tokens; consumption metrics divorced from output, sometimes formalized in internal leaderboards
  • trunk-based-development All developers integrate to a single mainline at least daily, in small batches, with feature flags managing incomplete work β€” the DORA-correlated practice that replaces long-lived feature branches
  • Type System Axes Static/dynamic (when types are checked) and strong/weak (how much implicit coercion) are independent dimensions
  • Typed De Bruijn indices for LLMs Replace variable names with typed slot references (`@Type.n`) so naming-related LLM error modes β€” misleading names, reused names, lost references β€” become impossible
  • Unmaintained-Scanner Pressure Binary "no release in N months β†’ unmaintained" heuristics generate downstream pressure on mature infrastructure libraries to ship churn or accept new maintainers
  • Vibe-engineering Using an agent to accelerate your own decision-making across every layer of a system, rather than delegating the decisions β€” the line that separates it from vibe-coding
  • Virtual Filesystems for LLM Agents Exposing databases as UNIX filesystems so LLM agents can browse instead of chunk retrieval
  • VLESS Subscription Format Base64-encoded newline-separated VLESS URIs consumed by V2RayN, Clash, and similar clients
  • WebAssembly Portable, sandboxed compilation target: core spec, interpreter vs AOT runtimes, wasm2js fallback
  • Whitelist Capability Config Embedded-scripting design where the config language starts with zero capabilities and the host registers each one explicitly, instead of starting from a full language and removing dangerous bits
  • Whitelist Internet Blocking Default-deny national filtering where only explicitly approved destinations resolve
  • Working around agent failure modes is the skill Most of the skill in using coding agents is knowing their specific failure modes and building around them β€” a skill that decays as labs fix those failures
  • Yggdrasil Network Experimental overlay IPv6 mesh network where each node's address is derived from its public key; routing is location-independent and decentralized
  • Zig comptime Zig's compile-time evaluation mechanism β€” same language at compile time as runtime, used for generics, typeclasses, and metaprogramming

entity 127

  • 0xsid 0xsid's personal blog at 0xsid.com β€” short opinion posts on agentic coding workflows and developer experience
  • A Collection of Unmitigated Pedantry (acoup.blog) Bret Devereaux's blog on ancient military and economic history, read through pop culture β€” long multi-part Collections on how pre-modern societies actually worked
  • acai.sh blog Single-author blog from the developer of acai.sh, on spec-driven AI-assisted development
  • Addy Osmani blog Engineering manager at Google Chrome's developer-tools team; long-form essays on web performance, software craft, and the cognitive economics of AI-assisted coding
  • alejandro.pe Alejandro Garcia Salas's personal site at alejandro.pe β€” long-form retrospectives on product, design, and engineering from a founding-engineer career
  • Alex Ellis Founder of OpenFaaS/Actuated/Inlets; blogs on self-hosted infra and local AI economics at blog.alexellis.io
  • Alexandr Wang Scale AI founder, became Meta's Chief AI Officer at 29 via the ~$14.3B Scale acqui-hire; runs Superintelligence Labs through the 2026 retention crisis
  • Amy J. Ko blog UW Information School professor (HCI, CS education) who writes Bits and Behavior on Medium, mostly LLM-skeptical takes on programming and learning
  • andrea-laforgia-blog Andrea Laforgia's substack (a4al6a.substack.com) β€” evidence-driven essays on software engineering practice and continuous delivery
  • Andrew Bosworth Meta CTO since 2022; built the parallel Applied AI Engineering org in 2026 that routes around Wang's Superintelligence Labs
  • Andrew Nesbitt (nesbitt.io) Blog covering package registries, supply-chain observability, git internals, and open-source infrastructure
  • Anthony Moser (anthonymoser.github.io) Anthony Moser's GitHub Pages blog; "haterdom" essay series critiquing AI, with community-translated editions
  • antirez (Salvatore Sanfilippo) Creator of Redis; writes prolifically about programming with LLMs; building DwarfStar, a local inference engine
  • Antman Does Software (Anthony Manning-Franklin) Anthony Manning-Franklin's blog at antman-does-software.com on software craft, learning, and AI skepticism
  • antonz.org Anton Zhiyanov's blog on Go, SQL, CLI tools, and interactive programming guides
  • appsec.guide β€” Trail of Bits Testing Handbook Trail of Bits' open testing handbook; security-testing guidance organized by language and technique, covering fuzzing, static analysis, cryptographic testing, web app testing
  • Argemma Blog Security-engineering blog at argemma.com, practical posts on cryptography, credentials, Go vulnerabilities, and AI/ML threat models
  • arkaung.github.io arkaung's GitHub Pages site with interactive math tutorials; Interactive TurboQuant is the first ingested piece
  • Armin Ronacher (lucumr.pocoo.org) Armin Ronacher's blog at lucumr.pocoo.org β€” Flask creator, Sentry co-founder, currently building Pi; long-running posts on Python, infra, and (recently) LLM tooling
  • arp242 (Martin Tournoij) Open-source developer; primary fsnotify maintainer; long-running personal site at arp242.net
  • asciimoth/ygg (Yggdrasil fork) Fork of yggdrasil-go separating the library (ygglib) from the daemon (yggd) and adding an embedded userspace TCP/IP stack for in-process networking
  • avkcode.github.io/blog avkcode's blog β€” AI industry analysis, geopolitical AI economics, infrastructure and hyperscaler dynamics
  • billjings.com Bill Jings's writing β€” software engineering practice, version control, async development workflows, tooling critique
  • Bitwarden Freemium open-source password manager, $100M PSG-backed since 2022, dual-track architecture (heavyweight .NET server, third-party Rust Vaultwarden), accumulating security incidents
  • Block, Inc. Jack Dorsey's payments company (Square, Cash App), also the publisher of Goose and Buzz β€” open-source agent tooling built on open protocols rather than vendor platforms
  • blog.andymasley.com Andy Masley's Substack β€” numerate critique of AI environmental panic, focused on water and data-center coverage; sober pro-AI on narrow technical points
  • Boldly Go (boldlygo.tech) Jonathan Hall's daily blog and newsletter on the Go programming language, language-spec walkthroughs, and Go testing patterns
  • bora.sh Bora TanrΔ±kulu's personal blog at bora.sh β€” short systems-engineering write-ups in the style of "I built X, here's the gnarly platform-specific bit"
  • Borogove Web-based XMPP chat client with local IndexedDB message storage
  • brgsk (brgsk.xyz) Blog with careful writeups on agent memory and AI systems that separate cognitive-science words from real engineering
  • Bryan Cantrill Systems engineer, DTrace co-creator, Oxide CTO; writes on software engineering culture
  • C3 Christoffer Lerno's C-tradition systems language; opinionated successor that's rethinking C's defaults from scratch
  • causality.blog Anonymous essay blog on programming-language foundations, concurrency, and the questions the mainstream debate skips
  • Charles Leifer's Blog Python and database systems engineer at charlesleifer.com; peewee ORM, SQLite/Postgres deep-dives, Redis internals, well-aged opinions
  • Claude Code Anthropic's terminal coding agent β€” the tool that maintains this vault, and the thing most of the toolbox extends
  • Clippy The official Rust linter; ships hundreds of lints across ten categories, configurable per crate or per workspace via Cargo.toml
  • CodeUtopia Jani Hartikainen's long-running blog on testing, maintainable code, and the craft side of software engineering
  • Cory Doctorow SF author and EFF advisor who writes Pluralistic and coined "enshittification"; central to the anti-monopoly / platform-decay discourse
  • Coywolf Jon Henshaw's site at coywolf.com β€” short notes on web tech, RSS, indie web, and SEO-adjacent tooling
  • Dan Luu (danluu.com) Dan Luu's blog β€” measurement-driven engineering writing from a CPU-verification background, covering testing, reliability, org dynamics, and now AI coding
  • datagirl.xyz Snow's personal blog at datagirl.xyz on retro x86/DOS systems, emulator internals, and low-level reverse-engineering
  • David Crawshaw (crawshaw.io) David Crawshaw's blog at crawshaw.io β€” co-founder of exe.dev, ex-Tailscale, ex-Google; writes on agent-driven engineering, small teams, and infrastructure
  • dayvster.com Dayvi Schuster's blog β€” modern systems-language opinions (Zig, Odin, C3), C++ defense, memory-management primers, anti-Rust contrarian takes
  • DeepSeek Chinese AI lab whose V3/R1/V4 model line drove the open-weights reasoning-model cost-collapse story of 2024-2026
  • dpc.pw (Dawid CiΔ™ΕΌarkiewicz) Blog by systems/crypto maintainer on LLM coding, dev-env isolation, open-source collaboration
  • DuckDB In-process analytical SQL database (columnar, vectorised, ACID) β€” popular for data-science notebooks and embedded analytics; gained a client-server protocol (Quack) in 2026
  • Edward Zitron Tech journalist behind "Where's Your Ed At," focused on AI industry financial unsustainability
  • Elena Verna's Growth Scoop Elena Verna's Substack newsletter on PLG, solopreneurship, and adapt-or-die framing for the AI-shaped workplace
  • emirb.github.io Emir BeganoviΔ‡'s personal blog (Booking.com Staff SRE) on infrastructure, virtualization, and KubeCon-shaped industry surveys
  • emschwartz.me Evan Schwartz's blog; Rust, web payments, and the Scour personalized-feed product
  • ENOSUCHBLOG (blog.yossarian.net) William Woodruff's blog β€” programming, philosophy, and pedaling; security-tooling and open-source-supply-chain writing
  • exe.dev blog (blog.exe.dev) Company blog of exe.dev, the nine-person fast-booting-VM startup; agent-driven engineering practice written up from inside a team that ships on it
  • Fred Brooks Author of The Mythical Man-Month and No Silver Bullet; Turing Award 1999
  • fsnotify Go cross-platform filesystem-notifications library; 321k dependent projects, the de facto file-watching primitive in the Go ecosystem
  • Garry Tan CEO of Y Combinator since 2023; recent figurehead for the executive AI-agent enthusiasm pattern, popularized "cyber psychosis" framing
  • gingerbill.org (Ginger Bill) Ginger Bill's blog β€” creator of the Odin language, writing on tool design, language design, and programming culture
  • Gowers's Weblog Tim Gowers's WordPress blog on combinatorics, mathematical exposition, and (recently) LLM-assisted mathematical research
  • Graham Helton's blog Red-team operator's blog at grahamhelton.com on SSH tradecraft, lateral movement, and offensive security tooling
  • Greg Wilson (third-bit.com) Greg Wilson's blog β€” empirical software engineering and research methods, skeptical of unmeasured claims about AI-assisted coding
  • GTFOBins Curated list of Unix-like executables that can be abused to bypass restricted shells, escalate privileges, and transfer files when an attacker is constrained to "live off the land"
  • HandyAI Substack newsletter on agent workflows, async coding bots, and AI-powered workspaces; written by an AI power user who is also skeptical of AI-induced executive theater
  • Happ Closed-source Android/iOS VLESS client popular in the RU VPN reseller market
  • icefox (wiki.alopex.li) Simon Heath's personal wiki; programming-language design, systems programming, software culture
  • Interfaze AI startup building a deterministic-by-design model aimed at structured output and parsing tasks; published the open Structured Output Benchmark in April 2026
  • internals-for-interns JesΓΊs Espino's weekly blog on software internals β€” Go runtime, filesystems, Linux kernel β€” written as "useful maps" not exhaustive references
  • itayinbarr.substack.com Itay Inbarr's Substack on agent scaffolds, small-local-model benchmarks, and the scaffold-model-fit framing of coding-agent evaluation
  • James Bennett Django core contributor, blogger at b-list.org, careful LLM skeptic
  • James Zhan (journal.james-zhan.com) James Zhan's personal journal β€” writing, typography, Mac software, and the case for declaring human authorship; footer reads "100% written by James, not AI"
  • jdx Jeff Dickey's blog at jdx.dev β€” author of mise and several other developer-tooling projects under the en.dev umbrella
  • jxnl.co Jason Liu's writing β€” instructor library author, AI agent workflows, structured output, RAG, knowledge work with coding agents
  • Lars Faye Lars Faye's personal site at larsfaye.com β€” articles on AI in software engineering, vendor dependency, and developer-skill economics
  • Leonie Monigatti AI engineering writer at leoniemonigatti.com on RAG, context engineering, embeddings; workshop speaker
  • Lewis Campbell Software consultant blogging at lewiscampbell.tech, also runs the data-consulting site outdata.net
  • LibAFL Rust framework for building coverage-guided fuzzers β€” composable stages, mutators, observers, and feedbacks instead of a fixed loop; descendant of AFL++ research
  • log.0x21.biz (oxzi) oxzi's blog β€” systems and security writeups in Go, OpenBSD/Linux sandboxing primitives; author of syscallset-go
  • loopwerk.io Kevin Renskers's personal blog at loopwerk.io β€” practical write-ups on Python, web dev, and developer tooling, often comparison-shaped
  • Marius (γƒžγƒͺウス.com) Marius's personal blog on self-hosting, OpenBSD, GrapheneOS, hardware longevity, and the politics of consumer computing
  • mattn (Yasuhiro Matsumoto) Prolific Japanese Go and Vim open-source developer; author of many widely-depended-on Go libraries
  • Meta Platforms Facebook/Instagram parent company; the AI org under Wang/Bosworth has become the public face of large-AI-lab cultural dysfunction in 2026
  • metalevel.at Markus Triska's site β€” Power of Prolog book, declarative-programming essays, constraint logic programming, logic puzzles, and Prolog-driven compilers/interpreters
  • Mintlify Developer tools company building AI-powered documentation assistants
  • mrmarket bearblog writer on tech culture, founder brands, and the decay of the open internet
  • Nautilus Grammar-based coverage-guided fuzzer; uses tree mutations on context-free grammars to produce structurally valid inputs that survive front-end parsing
  • npmx.dev MIT-licensed alternative web frontend over the npm registry, launched by Daniel Roe in January 2026
  • Obsidian Local-first markdown knowledge-base app with a community plugin / theme ecosystem; the canonical PKM target this wiki is built against
  • OpenAI AI company behind ChatGPT, converted from nonprofit to for-profit, preparing for $1T IPO
  • Pine AI Research org behind the Incompressible Knowledge Probes paper; Bojie Li's group, 01.me/research
  • PostgreSQL Open-source relational database; process-per-connection model with a shared buffer pool, central to several recent kernel-interaction stories
  • Pure Systems Blog at pure-systems.org on functional programming, language design, and systems programming from a long-time Haskell user
  • QEMU microvm machine type QEMU's stripped-down x86 machine type β€” no PCI, no ACPI, virtio-mmio only, qboot firmware, direct kernel boot, triple-fault shutdown
  • ratfactor (Dave Gauer) Dave Gauer's long-running personal site, full of "cards" β€” short focused notes on programming, Unix, and personal computing
  • Retro Catalog Curated database of retro gaming handhelds and emulator-target games, built by Jipsony as a buyer's guide for the modern Anbernic/Miyoo/Retroid ecosystem
  • Rivet Blog rivet.dev β€” engineering writeups from the team behind the Sandbox Agent SDK, focused on agent sandboxing and microVM infrastructure
  • runtimewire.com Developer-infrastructure news site; short launch reports that check vendor claims against the project's own architecture and specification docs
  • rust-vmm Shared Rust crate ecosystem under most modern VMMs β€” kvm-ioctls, vm-memory, virtio-queue, vhost-user β€” with multi-vendor governance
  • Rye Homoiconic general-purpose language in pure Go, designed to be embedded as a config or scripting layer with per-word capability registration
  • Ryelang Blog refaktor/rye project blog at ryelang.org/blog β€” language design notes, embedding tutorials, and capability-control writeups
  • Sam Altman CEO of OpenAI, central figure in AI industry governance debates
  • SDL (Simple DirectMedia Layer) Cross-platform low-level library for video, audio, input, and threading; SDL3 is the current major version, maintained by libsdl-org
  • Sean Goedecke's Blog Sean Goedecke's blog at seangoedecke.com β€” staff engineer essays on LLMs, careers, and the inside view of working at GitHub and Zendesk
  • Seiya Nuta Systems programmer and microkernel author behind Resea and FTL; blog at seiya.me on OS internals and IPC design
  • Simon Willison's Weblog Simon Willison's daily blog at simonwillison.net β€” short link-and-commentary posts on LLMs, datasette, web tooling, and open-source governance
  • sing-box Universal proxy platform in Go β€” the core underneath many modern circumvention clients
  • Socket Blog Socket.dev's writeups of npm/PyPI/RubyGems supply-chain incidents and ecosystem-security analysis
  • specification.website A single-author opinionated reference catalog of modern web specs, grouped by category and tagged Required/Recommended/Optional/Avoid
  • specular.fi Personal engineering blog at specular.fi β€” short, code-driven notes on Linux internals, Alpine, Docker, and unfamiliar Unix tools
  • Stoffel Labs MPC-as-a-service company building a developer-facing platform on top of [[secret-sharing]] + [[beaver-triples]] protocols
  • stvn.sh stvn's writing site at stvn.sh β€” first-person essays on tech work, AI corporate culture, and institutional knowledge
  • Tangled A git collaboration platform built on atproto, with self-hostable "knots" for repos and "spindles" for CI β€” and an engineering blog at blog.tangled.org
  • TanStack JS/TS library collective behind Query, Router, Table, Form, Virtual, Start β€” Tanner Linsley
  • Ted Chiang Science-fiction writer and essayist; recurring critic of LLM hype and anthropomorphism for The New Yorker and The Atlantic
  • Terence Tao Fields Medal mathematician who writes first-hand about using LLMs and coding agents for math exposition, tooling, and research
  • The Coder Cafe Substack newsletter covering one systems/concurrency/Linux concept per post in a "have a coffee, learn one thing" format
  • The Old New Thing (Raymond Chen) Raymond Chen's long-running Microsoft devblog on Windows internals, calling conventions, archaeological NT/Win9x history, and the why behind compatibility quirks
  • the_smart_ape (X account) X/Twitter account posting long-form security and SaaS-operator threads with concrete failure-mode case studies
  • theocharis.dev Jeremy Theocharis's blog on LLM-assisted work, local-first software, and engineering practice; writes with LLMs about using LLMs
  • Thomas Depierre (Musings about software) Elixir and DevOps consultant blogging at softwaremaxims.com; evidence-first takes on software practice and LLM skepticism
  • Trail of Bits New York-based security research and consulting firm; long history of audits, fuzzing tooling, and cryptographic review for crypto/blockchain and infrastructure clients
  • TSPU Russia's state-mandated DPI/filtering infrastructure deployed at every major ISP
  • Typeset in the Future (Dave Addey) Dave Addey's blog on the typography and graphic design of sci-fi films
  • Unsloth Quantization team behind the UD-Q*-XL GGUF family and Unsloth Dynamic 2.0 scheme; most-cited dynamic-quant publisher for Qwen/Gemma/DeepSeek
  • Vaultwarden Unofficial Rust reimplementation of the Bitwarden server by dani-garcia, lightweight enough to run on a Raspberry Pi, ~3Γ— the GitHub stars of the official server
  • verrchu's blog verrchu's blog at verrchu.github.io β€” short, deep technical posts on Rust gotchas with full compile errors and accompanying source
  • Xe Iaso (xeiaso.net) Writer/engineer behind Anubis; writes on WebAssembly, reproducible builds, Nix, web infra
  • xz-utils Incident 2024 social-engineering supply-chain attack where a long-running fake-maintainer persona ("Jia Tan") inserted an SSH backdoor into xz/liblzma
  • Zig Andrew Kelley's systems language; manual memory via arenas and allocators, no hidden allocations, comptime as the type-system programming mechanism
  • zknill.io Zach Knill's blog β€” distributed systems, durable execution, agent infrastructure, the routing primitive missing from cloud-native

overview 2

  • Kenn Software: local-first agent tooling suite Kenn Software's five single-binary, local-first Go tools for the agentic era β€” kata, middleman, agentsview, msgvault, roborev
  • Planned Pages Wikilinks deliberately left unresolved because the page is worth writing later, and what already references each one

summary 190