Blog

All articles. All pillars. All authors.

Thales & Claude flin

#166 -- The Entity .get() Method Bug

When .get() returned stale data from the entity cache instead of fresh database results.

7 min Mar 26, 2026
flinbugentityget +2
Thales & Claude flin

#165 -- The Theme Toggle Bug

When dark mode toggling caused a cascade of style recalculations and flickering.

7 min Mar 26, 2026
flinbugthemedark-mode +2
Thales & Claude sh0

34 Rules to Catch Deployment Mistakes Before They Happen

We built a pure-Rust static analysis engine with 34 rules across 8 categories to catch security issues, misconfigurations, and deployment mistakes before they reach production.

12 min Mar 26, 2026
ruststatic-analysissecuritycode-health +2
Thales & Claude sh0

Day Zero: 10 Rust Crates in 24 Hours

How we scaffolded an entire PaaS platform -- 10 Rust crates, 24 database tables, Docker engine client, API server, build engine, and health checks -- in a single day.

11 min Mar 26, 2026
rustarchitecturepaascargo-workspace +3
Thales & Claude sh0

Writing a Docker Engine Client from Scratch in Rust

Why we wrote a custom Docker Engine API client using hyper and Unix sockets instead of shelling out to the Docker CLI, and the multiplexed stream parsing that made it work.

11 min Mar 26, 2026
rustdockerunix-sockethyper +2
Thales & Claude sh0

Preventing Command Injection in a PaaS

A PaaS runs user-provided commands by design. Here is how we built validate_command() to prevent shell injection in cron jobs, deploy hooks, and Docker exec.

12 min Mar 26, 2026
securitycommand-injectionrustpaas +2
Thales & Claude flin

#045 -- Advanced Type Features: The Complete Picture

A retrospective on FLIN's complete type system -- how inference, union types, generics, traits, tagged unions, pattern matching, and control flow features form a coherent whole.

12 min Mar 26, 2026
flintype-systemadvancedcomplete +1
Thales & Claude sh0

AI Sandbox: Giving Claude a Safe Container to Debug Your Apps

We built an AI sandbox that gives Claude root access to an Alpine container with curl, git, node, and python -- so it can actually debug your deployments instead of just guessing.

9 min Mar 26, 2026
aisandboxdockermcp +3
Thales & Claude 0cron

Heartbeat Monitoring: When Your Job Should Ping You

The inverse of scheduled jobs: give your cron a URL to ping, and 0cron alerts you when the ping stops. Grace periods, token generation, and PostgreSQL interval arithmetic.

14 min Mar 26, 2026
0cronmonitoringheartbeatrust +2
Thales & Claude 0cron

Encrypted Secrets, API Keys, and Security

AES-256-GCM encryption, ${secrets.KEY} interpolation, JWT + API key authentication, Google Sign-In verification, and HMAC webhook signing -- the security layers of 0cron.

15 min Mar 26, 2026
0cronsecurityencryptionaes-gcm +3
Thales & Claude flin

#154 -- Production Panic Calls: Tracking and Elimination

How we tracked down and eliminated 5 production panic calls found during the audit.

9 min Mar 26, 2026
flinauditpanicserror-handling +1
Thales & Claude 0diff

Why We Built a Code Change Tracker for the AI Agent Era

In 2026, Claude, Copilot, Cursor, and Devin all modify code -- but nobody tracks who changed what. We built 0diff to solve AI agent attribution.

10 min Mar 26, 2026
0diffai-agentscode-trackingrust +2