Blog

All articles. All pillars. All authors.

Thales & Claude sh0

34 Rules to Catch Deployment Mistakes Before They Happen

We built a pure-Rust static analysis engine with 34 rules across 8 categories to catch security issues, misconfigurations, and deployment mistakes before they reach production.

12 min Mar 26, 2026
ruststatic-analysissecuritycode-health +2
Thales & Claude sh0

Day Zero: 10 Rust Crates in 24 Hours

How we scaffolded an entire PaaS platform -- 10 Rust crates, 24 database tables, Docker engine client, API server, build engine, and health checks -- in a single day.

11 min Mar 26, 2026
rustarchitecturepaascargo-workspace +3
Thales & Claude sh0

Writing a Docker Engine Client from Scratch in Rust

Why we wrote a custom Docker Engine API client using hyper and Unix sockets instead of shelling out to the Docker CLI, and the multiplexed stream parsing that made it work.

11 min Mar 26, 2026
rustdockerunix-sockethyper +2
Thales & Claude sh0

Preventing Command Injection in a PaaS

A PaaS runs user-provided commands by design. Here is how we built validate_command() to prevent shell injection in cron jobs, deploy hooks, and Docker exec.

12 min Mar 26, 2026
securitycommand-injectionrustpaas +2
Thales & Claude flin

#045 -- Advanced Type Features: The Complete Picture

A retrospective on FLIN's complete type system -- how inference, union types, generics, traits, tagged unions, pattern matching, and control flow features form a coherent whole.

12 min Mar 26, 2026
flintype-systemadvancedcomplete +1
Thales & Claude sh0

AI Sandbox: Giving Claude a Safe Container to Debug Your Apps

We built an AI sandbox that gives Claude root access to an Alpine container with curl, git, node, and python -- so it can actually debug your deployments instead of just guessing.

9 min Mar 26, 2026
aisandboxdockermcp +3
Thales & Claude 0cron

Heartbeat Monitoring: When Your Job Should Ping You

The inverse of scheduled jobs: give your cron a URL to ping, and 0cron alerts you when the ping stops. Grace periods, token generation, and PostgreSQL interval arithmetic.

14 min Mar 26, 2026
0cronmonitoringheartbeatrust +2
Thales & Claude 0cron

Encrypted Secrets, API Keys, and Security

AES-256-GCM encryption, ${secrets.KEY} interpolation, JWT + API key authentication, Google Sign-In verification, and HMAC webhook signing -- the security layers of 0cron.

15 min Mar 26, 2026
0cronsecurityencryptionaes-gcm +3
Thales & Claude flin

#154 -- Production Panic Calls: Tracking and Elimination

How we tracked down and eliminated 5 production panic calls found during the audit.

9 min Mar 26, 2026
flinauditpanicserror-handling +1
Thales & Claude 0diff

Why We Built a Code Change Tracker for the AI Agent Era

In 2026, Claude, Copilot, Cursor, and Devin all modify code -- but nobody tracks who changed what. We built 0diff to solve AI agent attribution.

10 min Mar 26, 2026
0diffai-agentscode-trackingrust +2
Thales & Claude deblo

AI Tutoring for 250 Million African Students

The vision behind Deblo.ai: an AI tutor that speaks French, understands the African curriculum from CP to Terminale, costs pennies per question, and works on any phone.

11 min Mar 26, 2026
debloai-tutoringafricaeducation +3
Thales & Claude deblo

100 Sessions Later: The Architecture of an AI Education Platform

FastAPI + SvelteKit + PostgreSQL + Redis + React Native. 24+ tables, 100+ endpoints, 60+ components, SSE streaming. The full architecture of Deblo.ai.

12 min Mar 26, 2026
debloarchitecturefastapisveltekit +2