Blog

Longer notes about code I shipped, bugs I chased, and decisions I may need to explain later.

• 2026-07-13 My first CVE: AliasVault's passkey bridge trusted the page
• 2026-05-13 Execra: one CLI runtime for headless and GUI callers
• 2026-05-09 GitTop: keyring-core and betting on the modular path