System Architecture

What I thought was a scheduling problem turned out to be a portability problem first

You know the TV gameshow Play Your Cards Right? Contestants are shown a sequence – in two rows – of giant playing cards presented face-down. The host turns over the first card. The cont…

This document describes Merkle Tree certificates, a new form of X.509 certificates which integrate public logging of the certificate, in the style of Certificate Transparency. The integrated design reduces logging overhead in the face of both shorter-lived certificates and large post-quantum signature algorithms, while still achieving comparable security properties to traditional X.509 and Certificate Transparency. Merkle Tree certificates additionally admit an optional signatureless optimization, which decreases the message size by avoiding signatures altogether, at the cost of only applying to up-to-date relying parties and older certificates.

Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships.

If two copies of the same email can produce two different payloads, trust disappears fast. I walk through the normalization decisions that make inbound email parsing predictable, debuggable, and safe to build on.

I built a TCP Network Load Balancer to understand how it works. In this post we are going to discuss about the same and understand how it works under the hood.

We have been using Signals in production for years via several modern front-end frameworks like Solid, Vue, and others, but few of us are able to explain how they work internally. I wanted to dig into it, especially diving deep into the push-pull based algorithm, the core mechanism behind their reactivity.

Discover how Anthropic approaches the development of reliable AI agents. Learn about our research on agent capabilities, safety considerations, and technical framework for building trustworthy AI.

DriveNets AI fabric’s end-to-end full-stack approach to networking for AI workloads

Periodically people are seized with a desire to put complex, bulky, and/or obscurely structured data into the Domain Name System (DNS). This draft defines a kitchen sink Resource Record that will satisfy this lust by defining a new DNS resource record for the storage of miscellaneous structured information.

Releasing Town Square. Bring back the feeling that real people are browsing your site with you.

Picos already have persistent identity, owned state, and an event-driven architecture—exactly the properties that make a good substrate for AI agents. The integration path starts with a simple webhook and leads somewhere much more interesting: a world where AI works for you, reasoning over data that is stored in your picos rather than on someone else’s platform.

Cleaning up manifold-api as a prerequisite for the spring conversational interface Capstone turned into a complete platform update: Pico Engine 1.0 compatibility, automated bootstrap, centralized notifications, and a Docker-based integration test harness. Once the platform was solid, the old temperature-network had an obvious new home inside Manifold's community framework, so I rewrote it too as an example of how Manifold can be a framework for pico networks.

A rundown of seven more common mistakes is system architecture diagrams and how to fix them

Rendering an Emacs status bar as an SVG image, like with my svg-line package (demo), really is several times heavier than the native text engine. The skeptics w...

I wish there was a counter running that told me how many screenshots and screen recordings I've taken over the years, but I'm into the tens of thousands easily. As a passionate Mac screenshotter, here are my keyboard shortcuts for the Mac that I think you should copy

A random sequence in an innocuous GPS message field is likely encrypted traffic from the U.S. military's system for remotely updating cryptographic keys around the world.

AI context graph startup Jedify has raised $24 million in an A-round to further develop its bringing ...

Our 64-bit Intel and AMD processors have evolved over decades. When you compile a Go program for a 64-bit Intel or AMD processor, the compiler targets, by default, a nearly 20-year-old instruction set. The binary that comes out runs on essentially any x64 chip, but it also leaves on the table every instruction that was … Continue reading How much do amd64 microarchitecture levels help in Go?

The keyword in politics these days is ‘sovereign’. What few will admit is that it is effectively the adoption of the American strategy: Make America Great Again. In other words, reindustrialization of key sectors of the economy. The UK used to be a computing champion. Our chip designs (ARM) originated from the UK. Canada had … Continue reading Sovereign

Webmention is an open web standard (W3C Recommendation) for conversations and interactions across the web, a powerful building block used for a growing distributed network of peer-to-peer comments, likes, reposts, and other responses across the web.

Decentralized tools to build community online. The intercommunal net where communities govern, pool funds and stay safe on their own terms.

How RSigma turns 3,800+ community detection rules into SQL queries for TimescaleDB

Why we chose Elixir over Go, Rust and Node for a high-performance Bluesky DataPlane - and how a small Rust NIF and in-process fan-out made it the right fit.

Open Catalogs are similar to the Hive Metastore before, an index for what tables you have in your data lake.

Applying blockchain primitives to dataset versioning, provenance, and integrity assurance

Views are PostgreSQL's cleanest abstraction and its most rigid. Rewrite rules, attribute numbers, and the dependency catalog turn column changes into teardowns.

A blog mostly about Clojure programming

Review your AI agent's code changes in a browser with inline comments and round-to-round diffs. Comment on specific lines, the agent fixes them. Single binary, works locally, any agent.

Two battle-tested patterns for keeping any two datastores — consistent. One you probably know. One you should.