DevOps 9 min read
Plant the Defect, Watch the Gate
Mutation testing pointed at CI checks instead of code: plant a known defect, require the gate to go red, and put a floor under how much it examined.
Vol. MMXXVI No. 100
Field reports from cloud-security engineering, AI experiments, and a homelab that keeps getting bigger.
Front page: latest writing from William Zujkowski
Start here: agentic security, tools, and homelab reading paths
-
Supply Chain 9 min read
Provenance Attests the Pipeline, Not the Intent
Three 2026 npm compromises shipped malware with valid provenance. Only one of them is visible in the signed fields, and a fourth shows what provenance does catch.
-
Linux 10 min read
The Command Said It Worked
Five commands this site published reported success while doing nothing. A small container lab reproduces four, and the cheap defense is running each command once where it must fail.
-
Software Engineering 5 min read
One ZIP, Two Lists of Files
A small reproducible ZIP lab shows why indexed and streaming readers can inspect different entries in the same archive.
-
Virtualization 5 min read
Two Processes, One Page Cache: Testing Shared State Before Blaming the VM
A small Linux experiment separates shared file identity from identical bytes, with a failed tmpfs control and a careful look at a July 2026 VM-isolation preprint.
-
AI 7 min read
A Correct Answer Doesn’t Mean the Agent’s Memory Is Clean
A synthetic memory-recovery drill shows why a correct task result and a clean derived state are separate checks.