Design·9 min read·
545 Terminal Themes, and the Rabbit Hole That Produced Them
A dataset of 545 terminal color schemes, converted to OKLCH and republished as an npm package — and the theme picker in this site's own header that quietly runs on it.
Vol. MMXXVI No. 87
Field reports from cloud-security engineering, AI experiments, and a homelab that keeps getting bigger.
Latest writing from William Zujkowski
Security·12 min read·
The Sandbox Isolates the Agent. It Doesn't Isolate the Secret.
MicroVMs and namespace sandboxes give AI coding agents mature filesystem and process isolation. Most open-source ones still hand credentials to the agent directly. Here's the proxy-injection pattern that fixes that, and what it doesn't fix.
Typescript·7 min read·
live-coding-music-mcp: Handing Claude a Browser and a Drum Machine
An MCP server that lets Claude live-code music in Strudel through a real, visible Chromium browser — no mocked audio API. What it does, what broke while I built it, and the engineering that came out of my first real browser-automation project.
Svg·6 min read·
No GIFs, No Script Tags: How Far a Single SVG File Can Go
svg-terminal is an experiment in how much you can make one self-contained SVG do: type, blink, phone an API for live stats, and survive a renderer that assumes every SVG is hostile. 48 blocks, zero JavaScript, one wry aside about trusting my own config file.
Security·12 min read·
Patch Fast, Pull Slow: Defending in the Year of Copy Fail
AI is finding bugs faster, researchers pile on the moment one drops, and registries ship malware by the hundred-thousand. Defenders are caught between two contradictory imperatives. The fix is architectural, not temporal.
Ai·10 min read·
A Month of Modularization: nexus-agents in April 2026
Extracting benchmarks into a standalone package was the punchline. The setup was a month of governance, skills, security, and pipeline discipline that made the extraction possible in an afternoon.