Writing
Notes from the practice.
August 2026 · notes from July
Existence is a leak
Access control guards what a record says. The harder problem is what a record's mere existence says, and why we proved that channel closed instead of testing it.
August 2026 · notes from July
The room is the perimeter
For a single-site practice, the strongest privacy architecture is often the smallest one: every record on one machine, in one room, with no cloud to breach.
August 2026 · notes from July
A backup is a claim. A restore is a proof.
Configured is not the same as true. Restores rehearsed before go-live, incident plans run as live exercises, and every safety mechanism treated as unproven until it has fired.
August 2026
Correctness is not one thing
A type error, a bad payload, a broken invariant, an unproven function, and a bad model output all read as "incorrect." No single tool catches them all, and pretending one does is how bugs ship.