Everything leaves
a trace.

Incident post-mortems and vulnerability analysis — what broke, how the attack actually worked, and what the code got wrong.

Longer-form investigation into how systems are designed, where trust actually sits, and the trade-offs that create risk.

Building things — tooling, infrastructure, and notes from the workbench.

Short entries, tended rather than published. These get revised as understanding changes.