AI ships fast, I stopped asking if I still understand my own code
Shipping AI-written code fast, I found imposter syndrome isn't one feeling but three, and only one of them is actually about not understanding the code.
Notes on infrastructure tooling, security automation, and the things I build. Rust, Terraform, Kubernetes, and whatever rabbit hole I fell into last.
Every op call triggers a Touch ID or CLI authorization prompt, and that authorization expires after 10 minutes of idle. In an agent loop, that's death by a thousand prompts. Here is how I cut it to one prompt per vault per session by abusing a single op pipe — and packaged it as a public Claude Code plugin.
Claude Code hardcodes how it launches the Playwright MCP server, making extension mode impossible. Here's how I reverse-engineered the problem and patched it with a 2-line fix.
How a transparent MITM proxy intercepts outbound HTTP/S requests and replaces PII and secrets with format-preserving fakes before they reach LLM providers or third-party APIs — without touching application code.
A focused look at PPlex — a Rust TCP proxy that demultiplexes long-lived client connections to a pool of stateless gRPC upstream workers, making monolithic TCP servers horizontally scalable without a rewrite.
How to make Cmd+V paste images in iTerm2 by intercepting the clipboard with Hammerspoon and auto-saving to a temp file.
PDF generation sounds like a solved problem until you actually do it. Headless Chrome rendering, browser pools, timeout handling, and everything else that sits between 'it works on my machine' and reliable production output.
How I built a dual-engine bot for Dofus 1.29 — combining OpenCV template matching and OCR for UI state with passive TCP packet analysis for game state.
Version constraints in Terraform modules look harmless until they aren't. This is how MonPhare catches drift, conflicts, and risky patterns before they reach production.
How treating secrets as versioned, typed, encrypted npm packages eliminates the secret sprawl problem — without requiring a vault migration or changing developer workflows.
How to take old monolithic TCP servers and architect them for the cloud using a custom proxy/load balancer that handles sticky sessions, context switching, and upstream gRPC distribution.