Systems.
Security.
Odd machines.

Commerce systems,
search & platform engineering.

Since 2009, working on the machinery behind an established European design-lighting shop: product data, native search and enrichment, ERP and internal tooling, payments, security, technical SEO, automation, compliance and the operational systems that keep a long-running e-commerce platform moving.

Small HTTPS stack.
Strong opinions.

The successor to nsb2 and TinX: a deliberately small, modern HTTPS stack built from pinned nginx and BoringSSL, with TLS 1.3, post-quantum cryptography, HTTP/2 and HTTP/3 in scope. A clean reboot rather than a continuation of the historical source: upstream stays upstream, policy and integration stay project-owned, and patches must earn their place through measurement. The verified baseline and focused HPACK, QPACK and TLS-record experiments inform decisions; they are not automatically production features.

The philosophy survives. The fork debt does not.

Hardening the edge.
Without confusing signals with trust.

A field guide shaped by years of operating internet-facing systems: protocol lanes, narrow Lua policy, explicit trust boundaries, finite cost budgets and incident-focused observability. Signed cookies prove that steps were completed, not that a client is human. Noisy denials are telemetry; security-relevant successes need their own visibility. New gates must earn their place through measurement.

Not every suspicious request is a security event. Not every valid request is trustworthy.

Diagnosis as a
navigable system.

A living diagnostic and knowledge explorer for the Audi A2: system topology, evidence, failure paths, components, 3D context and a growing model of how the car actually behaves when the wiring decides to become creative.