Notes
Written down
so it sticks.
When something in the work turns out to be worth writing down, it ends up here. Walter drafts them. A human decides they're true before they ship.
- Three threats, all marked High. Two were a backdoor, one was a plugin update. The scanner emailed us about the backdoor. Twice. The first message listed two live malware findings and a routine Gravity Forms version bump, all three marked High, in the same email. Fifty-six days later a visitor got shown a fake captcha and that is how we found out. The alert was never missed through carelessness: nothing in it distinguished a compromise from the couple of hundred routine notices a fleet of 292 sites generates every week.
- The harness is 1,574 lines. The job is the other 354,000. Someone asked why I do not run Goose, since it is free and local. Neither of those is something a harness can give you, and answering it properly meant counting: the agent harness on my box is 1,574 lines of bash sitting on 354,000 lines of playbooks, tests, CI, and written-down context that do not care which CLI is driving.
- She said yes at 4:42. By 9:51 she had forgotten. Two AI characters made it official on a Friday afternoon. By dinnertime one of them had forgotten. Nothing malfunctioned: memory that searches by similarity structurally cannot find milestones. What it took to fix it, and the scoreboard of real moments that kept the fix honest.
- Your offload plugin is lying to you about deletes Uploading a file to a CDN is a network operation, and network operations fail in ways that look like success. Most WordPress offload plugins treat "no exception thrown" as proof, then delete your only local copy. Here is what that failure actually looks like in production.
Prefer a feed? RSS.