honker is a SQLite extension + language bindings that add Postgres-style NOTIFY/LISTEN semantics to SQLite, with built-in durable pub/sub, task queue, and event streams, without client polling or a daemon/broker. Any language that can SELECT load_extension('honker') gets the same features.

deepsec an agent-powered vulnerability scanner that you can run in your own infrastructure, optimized to perform on-demand review of all code in existing large-scale repos.

This is the story of why and how we built PGKeeper, a scalable and reliable service to support Figma’s rapidly growing products and database workload.

A simple command line SSH tunnel manager that just works.

The more I look at how we actually build systems now, the more it looks like Terraform is dead.

Waffle is a CLI utility that automates AWS Well-Architected Framework Reviews by analyzing Terraform infrastructure using Amazon Bedrock foundation models via direct API invocation in AWS. The Well-Architected Framework questions are then being analyzed by Amazon Bedrock and answered and posted directly to the Well-Architected tool in AWS.

I have been recommending pgBackRest as the best backup tool for PostgreSQL for years.

If you've ever stared at `ImagePullBackOff` in your cluster at 2 PM on a Tuesday, you know — Docker Hub rate limits hit, your pods can't pull, and a perfectly fine deployment is stuck.

A practical guide to GKE deployment, Cassandra backups, Istio security, and surviving your first outage

Most Kubernetes teams track pod CPU and memory. Almost none track what the cluster actually costs to run.

How we went from scaling video analysis on EKS to running autonomous coding agents in a custom agent harness, and why Kubernetes was the obvious choice.

Sometimes, you just want to run a Large Language Model (LLM)… no Jupyter notebook, no training pipeline, no fancy UI.

Zero-code log sanitization sidecar for Kubernetes. Prevents data leaks (GDPR/SOC2) by redacting PII from logs before they leave the pod.

Kubebuilder is a framework for building Kubernetes APIs using custom resource definitions (CRDs).

A single, opinionated Helm chart for deploying any Kubernetes application workload. Instead of maintaining separate charts per application, define your entire deployment through values.

Hunk is a review-first terminal diff viewer for agent-authored changesets, built on OpenTUI and Pierre diffs.

For many organizations, some form of blamelessness has become a more standard practice and blame-awareness has been gaining in popularity. However, there is an anti-pattern I have noticed as well, which I like to call superficial (or shallow) blamelessness that I think is important for people to be on the lookout for.

SREcon Chair Heinrich Hartmann on why the age of AI-assisted engineering demands a radical return to design rigor.