ci-cd

The Alert That Cried Wolf Daily

A reconciler that scans all history with no memory of what it already reported files the same finding every morning until nobody reads it.

Two Green PRs, One Migration Number

Both branches were green and neither could have been anything else, because the number a migration claims is a property of the merged tree.

The Gate That Measures Nothing

Five monitors ran green their whole lives while unable to observe the layer they claimed to check. A green check is evidence only if the check can see.

Migrating an Agent Fleet from Tarball Installs to a Private npm Registry

12 critical Dependabot alerts, one incomplete migration, and four PRs to finish the job. What the move from tarball URLs to GitHub Packages actually looks like.

Staging Environments for AI Agents

A 4-phase environment strategy for AI agent infrastructure - Cloudflare splits, automated CI/CD, scoped secrets, and agent-aware routing.

The site: spam gate and scheduled publishing

September in review: the remediation wave

August in review: the latent-defect audit

Three pipeline failures hiding inside a date fix

Semgrep as a CI gate