No framework, no CMS, no newsletter platform. Just files and a few hundred lines.
This site is a deliberate exercise in owning the whole stack. There is no web framework here, no content management system, and no third-party newsletter service. Posts are Markdown files in a git repository. A small Python script turns them into static HTML. That's the entire machine.
A good reminder that a pile of static HTML files outlives every framework you could have reached for. No build server to babysit, no runtime to patch, no vendor to migrate off of in three years. Boring is a feature.
The whole essay is worth reading, but the core is one line: the tools you build bend to you; the tools you rent bend you to them. For anything small enough to build, that trade is almost always worth making.
Most AI-security commentary is opinion with nothing behind it. The gap is the whole point.
There is no shortage of takes on AI security. Feeds are full of them — confident, abstract, and untethered from anything that runs. The supply of opinion is effectively infinite, which means opinion by itself is worth almost nothing.