Now

building

BinaryClerk — a local-first desktop AI coworker: Electron + React, SQLite, AI SDK agent loop, Fastify WebSocket bridge to a real Chrome extension. Active development; waitlist on the homepage.

writing

Latest long-form note: Mini Shai-Hulud / TanStack supply-chain worm — GitHub Actions cache poisoning, npm propagation, and persistence in AI coding tools.

learning

Agent runtimes under load, supply-chain and CI trust boundaries, and how “vibe coding” with Cursor / Claude Code changes the attack surface for teams.

not focusing on

• Multi-tenant SaaS for BinaryClerk — ship local-first first.
• VC narrative or growth hacks — sustainable product over slides.
• Hot takes for engagement — prefer deep dives and reproducible notes.