Systems.
Security.
Odd machines.

Commerce systems,
search & platform engineering.

Since 2009, working on the machinery behind an established European design-lighting shop: product data, native search and enrichment, ERP and internal tooling, payments, security, technical SEO, automation, compliance and the operational systems that keep a long-running e-commerce platform moving. The challenge is keeping that interconnected business platform coherent, available and dependable — from product discovery and payment to ERP operations and invoicing.

Small HTTPS stack.
Strong opinions.

The successor to nsb2 and TinX: a deliberately small, modern HTTPS stack built from pinned nginx and BoringSSL, with TLS 1.3, post-quantum cryptography, HTTP/2 and HTTP/3 in scope. A clean reboot rather than a continuation of the historical source: upstream stays upstream, policy and integration stay project-owned, and patches must earn their place through measurement. The verified baseline and focused HPACK, QPACK and TLS-record experiments inform decisions; they are not automatically production features.

The philosophy survives. The fork debt does not.

Hardening the edge.
Without confusing signals with trust.

An operational field guide shaped by years of noisy public traffic: SNI/ALPN routing, an H1 compatibility cage, narrow Lua policies, measured origin-cost budgets and forensic observability. The lesson is not to identify every bot: separate network origin from trust, keep expensive work bounded, and make security-relevant outcomes visible. Signed tickets prove that a step was completed, not who completed it.

Not every suspicious request is a security event. Not every valid request is trustworthy.

Diagnosis as a
navigable system.

A living diagnostic and knowledge explorer for the Audi A2: system topology, evidence, failure paths, components, 3D context and a growing model of how the car actually behaves when the wiring decides to become creative.