Blog
All articles. All pillars. All authors.
#166 -- The Entity .get() Method Bug
When .get() returned stale data from the entity cache instead of fresh database results.
#165 -- The Theme Toggle Bug
When dark mode toggling caused a cascade of style recalculations and flickering.
34 Rules to Catch Deployment Mistakes Before They Happen
We built a pure-Rust static analysis engine with 34 rules across 8 categories to catch security issues, misconfigurations, and deployment mistakes before they reach production.
Day Zero: 10 Rust Crates in 24 Hours
How we scaffolded an entire PaaS platform -- 10 Rust crates, 24 database tables, Docker engine client, API server, build engine, and health checks -- in a single day.
Writing a Docker Engine Client from Scratch in Rust
Why we wrote a custom Docker Engine API client using hyper and Unix sockets instead of shelling out to the Docker CLI, and the multiplexed stream parsing that made it work.
Preventing Command Injection in a PaaS
A PaaS runs user-provided commands by design. Here is how we built validate_command() to prevent shell injection in cron jobs, deploy hooks, and Docker exec.
#045 -- Advanced Type Features: The Complete Picture
A retrospective on FLIN's complete type system -- how inference, union types, generics, traits, tagged unions, pattern matching, and control flow features form a coherent whole.
AI Sandbox: Giving Claude a Safe Container to Debug Your Apps
We built an AI sandbox that gives Claude root access to an Alpine container with curl, git, node, and python -- so it can actually debug your deployments instead of just guessing.
Heartbeat Monitoring: When Your Job Should Ping You
The inverse of scheduled jobs: give your cron a URL to ping, and 0cron alerts you when the ping stops. Grace periods, token generation, and PostgreSQL interval arithmetic.
Encrypted Secrets, API Keys, and Security
AES-256-GCM encryption, ${secrets.KEY} interpolation, JWT + API key authentication, Google Sign-In verification, and HMAC webhook signing -- the security layers of 0cron.
#154 -- Production Panic Calls: Tracking and Elimination
How we tracked down and eliminated 5 production panic calls found during the audit.
Why We Built a Code Change Tracker for the AI Agent Era
In 2026, Claude, Copilot, Cursor, and Devin all modify code -- but nobody tracks who changed what. We built 0diff to solve AI agent attribution.