Software engineer, mostly Go/TypeScript/Python. Currently Director of Engineering at Stamus Networks.https://example.com/https://example.com/blog/ai-qa-gates/https://example.com/blog/ai-qa-gates/I built an AI code generation orchestrator where the AI never gets to skip the test suite. Deterministic QA gates, plans in the database, and why prompt engineering won't fix this.Tue, 02 Dec 2025 00:00:00 GMThttps://example.com/blog/dosismart-stack/https://example.com/blog/dosismart-stack/Dosismart is a dose calculation platform I'm building for the French operational dosimetry market. Zitadel auth, OpenTelemetry tracing, 12 containers in the dev stack, and HDS certification ahead.Tue, 20 Jan 2026 00:00:00 GMThttps://example.com/blog/elasticsearch-bare-metal-tuning/https://example.com/blog/elasticsearch-bare-metal-tuning/Thread pools, shard strategy, custom analyzers, and the Logstash-to-Fluentd migration. How I got an NDR pipeline to handle Suricata at 100Gbps.Wed, 15 Oct 2025 00:00:00 GMThttps://example.com/blog/monorepo-vs-polyrepo/https://example.com/blog/monorepo-vs-polyrepo/Every project starts the same way: auth, database, CI, Docker, tests. I got tired of redoing it, so I built a template. Here's what kept going wrong and how I fixed it.Tue, 10 Feb 2026 00:00:00 GMThttps://example.com/blog/multi-cloud-gitops/https://example.com/blog/multi-cloud-gitops/Terraform for 4 providers, ArgoCD app-of-apps, Cilium network policies, CrunchyData PostgreSQL operator, and NixOS VMs for on-prem K3s. How I manage 5 clusters.Thu, 12 Jun 2025 00:00:00 GMThttps://example.com/blog/nixos-multi-machine-flake/https://example.com/blog/nixos-multi-machine-flake/My declarative setup for 2 desktops and 2 laptops. Overlays for custom packages, Home Manager for user configs, and why I stopped configuring things by hand.Mon, 22 Sep 2025 00:00:00 GMThttps://example.com/blog/nixos-theme-switcher/https://example.com/blog/nixos-theme-switcher/I built a theme system in Nix that generates configs for waybar, dunst, kitty, neovim, tmux, Firefox, VSCode, Qt5 apps, swaylock, and the login greeter from a single color palette.Mon, 16 Mar 2026 00:00:00 GMThttps://example.com/blog/stamusctl-1-two-commands/https://example.com/blog/stamusctl-1-two-commands/I wrote a Go CLI that pulls templates from an OCI registry, renders a Docker Compose config, and gives you a full Suricata-based network detection system in minutes.Tue, 19 Aug 2025 00:00:00 GMThttps://example.com/blog/stamusctl-2-docker-and-pcap/https://example.com/blog/stamusctl-2-docker-and-pcap/Circuit breakers for Docker, binary protocol parsing for log streaming, and how readpcap spins up a temporary Suricata container to turn a PCAP file into indexed security data.Tue, 26 Aug 2025 00:00:00 GMThttps://example.com/blog/stamusctl-3-daemon-and-testing/https://example.com/blog/stamusctl-3-daemon-and-testing/stamusd exposes the same CLI as a REST API. Priority-based shutdown, hot-reloading auth, rate limiting with Redis fallback, and testing with an in-memory filesystem.Tue, 02 Sep 2025 00:00:00 GMThttps://example.com/blog/yaml-driven-react-app/https://example.com/blog/yaml-driven-react-app/I built a game codex viewer where all the data lives in YAML files. Singleton loader with concurrent fetching, React hooks, character creator with localStorage persistence, and PDF export.Thu, 18 Dec 2025 00:00:00 GMT