Things I build, break, fix, and write about

12 October 2026
Weekly Tech Digest | 12 Oct 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

28 September 2026
Removed SSRF beta detections in Cloudflare WAF

Cloudflare WAF Managed Rules have a habit of changing underneath you, and old SSRF names can linger long after the protection has gone. I prefer to...

28 September 2026
Weekly Tech Digest | 28 Sep 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's...

27 September 2026
Cloudflare WAF metadata changes for WordPress XSS

Cloudflare WAF WordPress XSS detection now has a cleaner CVE label, but the behaviour has not changed; the rule still blocks the same traffic, just...

Latest blog posts you might like

4 September 2026
Reading upstream diversity in Cloudflare Radar

Cloudflare Radar AS routing looks tidy until you remember it is built from observed BGP paths, not the whole internet. I trust it most when a chart looks awkward, because that is usually where the...

3 September 2026
Sidecar deployment using cloudflare/mesh in a Pod

I prefer keeping the Cloudflare Mesh container image beside the app, not baked into it. The Pod stays clean, the app stays ignorant, and the irritating bit lives where it can be replaced without...

3 September 2026
Cloudflare AI Gateway unified billing and limits

Cloudflare AI Gateway unified billing is one of those settings that looks minor until the bill starts moving in a different direction. I’ve seen enough homelab nonsense to know the boring controls...

2 September 2026
AI governance boundaries in product organisations

Google DeepMind is a useful place to watch when product pressure meets safety theatre. The interesting bit is not the model release, but who has the nerve, and the authority, to say no when the...

2 September 2026
Token budgeting for agent state in Go

I prefer a Go standard library context engine when the token limit matters, because it forces the awkward bit up front, before the prompt is stitched together. Get the ranking wrong and you do not...

1 September 2026
Privacy boundaries when AI touches government records

AI governance gets awkward fast when government records are involved, because the model is rarely the problem. The problem is the sloppy boundary around it, the sort I have seen quietly turn a...

1 September 2026
Metadata schema choices for content libraries

Structured metadata only works when it matches how people actually retrieve content. I have seen neat schemas fail as soon as the library meets real records, and tarot makes the problem obvious. If...

31 August 2026
Federation trade-offs in self-hosted social feeds

Federation looks tidy until you let it touch the edges, and then the odd cases arrive fast. I prefer self-hosted social feeds that stay explicit about what is local, what is remote, and what should...

31 August 2026
FireAvert Z-Wave stove shutoffs for offline safety

FireAvert’s setup does the part that matters without asking Home Assistant to babysit it, which is exactly how I want stove protection to behave. The Home Assistant Z-Wave stove shutoffs badge is...

31 August 2026
Weekly Tech Digest | 31 Aug 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.