Two critical PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619) were patched on 21 October 2026. What they are, who is actually exposed, and the response sequence for PHP and WordPress site owners.
Every post shipped a secret stylesheet. So we rebuilt the theme: 11 native classes, zero inline CSS, 30 posts migrated with machine-checked proof.
Row-level security, schema-per-tenant, and tenant context patterns for Spring Boot — with the request lifecycle, index rules, and pitfalls from three production multi-tenant systems.
You can run production-quality large language models on your own hardware. No API keys. No rate limits. No data leaving your network. The cost? A one-time GPU investment that pays for itself in 3-6 months compared to cloud API bills. TL;DR Production-quality LLMs run on your own hardware — no API keys, no rate limits, […]
Part 3 of our OnTheGoRentals dev diary. We cover MinIO object storage, the Prometheus + Grafana + Loki observability stack, Docker deployment, and technical debt.
The Composition API is not just a syntax change — it is a paradigm shift. After building three production applications with it, we have developed patterns that make Vue 3 codebases more maintainable, more testable, and more enjoyable to work on. Published: July 7, 2026 Tech Stack: Vue 3 Pinia TypeScript Vite TL;DR Composition API […]
Building a smart-home TTS stack on hardware you already own — no GPU, no cloud API, no bill. We wanted text-to-speech for automation triggers that runs locally, on existing CPU hardware, without sending every doorbell announcement through a third-party API. So we built a FastAPI service around Kokoro ONNX with voice blending, dialogue scripting, and […]
Every prediction someone makes online deserves accountability. We built Since — a self-hosted temporal claim tracker — to register predictions, record past events, attach evidence, open disputes, and verify outcomes over time. The stack is deliberately lightweight: React 19, PocketBase, Express.js, and Docker. Here’s why we chose each piece, what surprised us, and what we’d […]
Every agent architecture article talks about LLMs, tools, and skills. Nobody talks about the thing that actually makes them work: the harness. It’s the runtime that takes your prompt, decides what tools to call, manages context, handles errors, and returns a result. Without it, you have components. With it, you have an agent. This is […]
Most AI agents today are still just chatbots with a tool call bolted on. They can chat, but they can’t reliably do specialised work. The ones that ship real value — document editing, brand compliance, data analysis, deployment — have something the others don’t: Skills. Agent Skills are an open standard from Anthropic for packaging […]
