Skip to content

┌─ CASE FILES ─── 06 RECORDS ─── ACCESS: GRANTED ─┐

Case Files

Field notes from the infrastructure. Some records are redacted — hover to declassify.

  1. 0012026.07.20PUBLIC#aws #iam #security

    How IAM Actually Decides Who Gets In

    IAM feels random until you see the one check it runs on every request. After that, policies stop being magic words.

  2. 0022026.07.12PUBLIC#docker #containers #ci-cd

    Your Docker Image Is 900MB. It Doesn't Need to Be.

    A multi-stage build and a smaller base usually cut an image by ten times or more. Here's what's actually taking up the space, and how to get rid of it.

  3. 0032026.07.04PUBLIC#bash #shell #reliability

    The Four Lines at the Top of Every Bash Script I Write

    Bash defaults let a script fail silently and keep going. These four lines make it stop the moment something's wrong.

  4. 0042026.06.18PUBLIC#kubernetes #ci-cd #reliability

    Zero-Downtime Deploys Without the Prayer

    Rolling updates, readiness gates, and the small settings that decide whether a deploy is a non-event or a 2am page.

  5. 0052026.05.02RESTRICTED#on-call #incident-response #observability

    The 3AM Runbook

    What actually happens when the pager goes off, and how to make future-you calmer than present-you.

  6. 0062026.03.27CLASSIFIED#security #vault #secrets

    Secrets That Never Touch Disk

    A way to hand credentials to workloads without a single secret ever landing in a file, an env dump, or a git history.