Blog
Notes on building and testing software, using AI in development, securing applications and taking products to market.
RSS feed ↗-
Vercel April 2026 security incident: what happened and what users should do
A measured breakdown of the Vercel April 2026 security incident, what is confirmed about environment variable exposure, and what Vercel users should do now.
-
How to build a website that still wins in the age of AI search (2026)
A practical 2026 guide to building websites that still win in AI search with sharper positioning, stronger trust signals, better UX, and content worth quoting.
-
Building a More Native Authoring Layer for WordPress
Why we are exploring a structured markdown-to-block workflow for WordPress, and why cleaner, more portable native output matters more than another content gimmick.
-
Claude Mythos and the AI Vulnerability Arms Race: Why Human-Speed Patching Is No Longer Enough
Anthropic's Project Glasswing sharpens a broader point for security leaders: in AI cybersecurity, discovery is accelerating faster than most organisations can remediate.
-
Why I'm Testing Local AI Agents
A practical founder-led take on testing local AI agents, open models, Ollama, and why local-first experimentation matters for real AI systems.
-
Why AI Agents Need Guardrails
A founder-led piece on why AI agents need guardrails, and what a real-world email mistake taught me about oversight, escalation, and building useful systems properly.
-
How Founders Are Using Codex and Terminal-Native AI Workflows to Ship Faster in 2026
A practical look at how founders are using Codex and terminal-native AI workflows to ship websites, tools, and digital systems faster in 2026.
-
Codex, OpenClaw and real agentic workflows
A founder-led view on Codex, OpenClaw, multi-agent workflows, and why serious operators are building supervised agent systems for real work, not demos.
-
What actually makes modern digital delivery work
A practical founder-led note on how frontend build, SEO, marketing, and infrastructure have to coordinate if client delivery is going to hold up under real-world pressure.
-
Why good digital work usually comes from specialist teams
A founder-led note on why serious client delivery improves when SEO, marketing, build, and security are handled by the right specialists working in sync.
-
Shipping BuzzBoost without bloat
Founder-side notes on tightening a service site around clarity, proof, and commercial signal instead of generic agency theatre.
-
GreenTracer and the discipline of a signal product
Notes on shaping GreenTracer around evidence, legibility, and product trust instead of sustainability theatre.
-
From design reference to production React
A practical workflow for turning visual references into production React without flattening the design system or shipping brittle AI output.