Field notes / 2022-present
Things I learned by looking closer.
Security findings, audit patterns, build logs, and personal notes. Sensitive source material is edited to keep the lesson without publishing private details.
Building tools that discover tools
Notes from designing an agent pipeline that turns source material into reusable skills without hardcoding every integration.
Side projects as field notes
I use small projects to make curiosity concrete, leave evidence of what I learned, and find the next question.
Authorization belongs at the resolver
A GraphQL field can be perfectly typed and still expose data or mutations that the current user should never reach.
Bounded work is a smart-contract invariant
Why attacker-controlled arrays and linear cleanup can turn an ordinary staking path into a permanent availability problem.
Move state before interactions
A reentrancy case study in loan settlement, stale records, and why checks-effects-interactions is really about temporal truth.
Empty inputs are still inputs
How an empty poll choice exposed a state-accounting gap, and what it taught me about validating transitions rather than shapes.