32 posts in English
After a compromised Mac and AI agents leaked secrets into session logs, I began building GuestSafe: a local, auditable alternative to .env.local.
A field survey of local secret stores for AI agents on macOS—and the privilege boundary needed to keep an agent from erasing its own access trail.
Your decision, your responsibility. Not your responsibility, not your decision to make. A common-sense framework for rethinking platform liability by tying responsibility to the specific decisions platforms actually make.
Two tired parents, a one-year-old, and a thousand bookmarked places we keep meaning to visit. Here is the small planning agent we built so that every Saturday no longer starts with the same question: 'so... where are we going today?'
A technical deep-dive into why Carried Patch Queue (CPQ) is the gold standard for individuals maintaining their own software stacks in 2026 — and why the old ways of managing downstreams will eventually kill your project.
It is now possible for each person to maintain their own personal distro with AI: a fast-moving, opinionated downstream version of software that continuously rebases on upstream while preserving your own defaults, workflows, and carried patches.
A deep-dive security review of Claude Code's internals, reconstructed from its published source maps. Covers permission sandboxing, shell execution, credential handling, remote killswitches, and 10 findings.
Figma is invisible to AI agents. Developers across X have spent the past two weeks converging on the same fix: make design principles explicit, structured, and agent-executable.
Address poisoning isn't a user problem — it's a wallet UI bug. How wallets enable this $68M attack and how to fix it.
A technical proposal for decentralized email anti-spam using trust propagation, group trust, and optional pay-to-email mechanisms.
A proposal for Orange DAO to create a Perk Exchange page where founders can share and discover startup perks and credits.
An entrepreneur's journey to understanding accounting: from the balance sheet to income statements, demystifying the core logic.
How 'overhead' shapes content length, music distribution, and business scale — from Broadway shows to blockchain micro-transactions.
AI is to thinking what the car was to walking — a reflection on how tools from handwriting to AI have amplified human intellectual capacity.
Why international flights still require manual check-in, and a proposal for standardized APIs between airlines and customs for digital verification.
How blockchain could transform tipping from unreliable one-off transactions into a transparent, reputation-based system that rewards good service.
A constructive analysis of why calling customer service is so painful — from wrong numbers to complex menus to repeated identity verification.
《The United States of Europe》读书笔记：从二战到2004年，欧盟的历史、关键人物和欧元诞生过程。
How on-chain reputation creates a qualitative leap over traditional systems through openness, decentralization, and fairness.
A curated list of books I highly recommend, from Bill Gates to Vitalik Buterin.
Exploring the concept of group delegatees in DAO governance — how collectives using multi-sig wallets can serve as more resilient delegates.
A technical overview of Ethereum for internet engineers, covering its state machine model, execution layer, and consensus mechanism.
A living document on my writing workflow: Markdown, Obsidian, Jekyll on GitHub Pages, inspired by the Zettelkasten method.
A running list of tools and gear I use daily — blogging, IDE, full-stack development, headphones, and sport monitoring.
My foundational article on why I write: self-expression, personal growth, connecting with readers, and the joy of creative exploration.
A vision statement of D3Serve: why digitizing trust — like the digitization of information before it — promises a leap in productivity, loss-less precision, lower cost, and automation.
A framework for understanding communities: what defines them, why they matter for collaboration, and how to build them.
Defining the Open Contributor Community model: everyone can contribute, trust is earned through contributions, and contributions are rewarded.
A quick guide to bridging Slack and Discord channels using matterbridge with Docker in just 3 minutes.
从汉密尔顿因教会资格被拒而无法上学的经历，思考教会权力、社会保障与国家形态的关系。
A presentation on the philosophy behind building and engineering a thriving community of contributors.
A practical guide to code reviews based on experience at Google, covering pre-screening, understanding, and evaluating change lists.