russalo
@blog
posts
tags
search
rss
subscribe
resources
sign in
russalo
@blog
~ %
ls -t posts/ | grep "#security"
#security
3 published posts
Jul 11, 2026
Before an AI reads a file you didn't write
Modern AI agents don't just read a file — they act on it. So point something that can't be talked into anything at it first. That's what I built.
ai
·
file-observer
·
mcp
·
prompt-injection
·
security
Jun 27, 2026
Turn Your Secrets Into Reproducible Artifacts: age + chezmoi Across Your Machines
You can’t commit secrets to git — so they sit in plaintext, one copy each, backed up nowhere, and a dead disk takes them with it. I made the case for why that’s the real problem already; this post is…
age
·
backups
·
chezmoi
·
devops
·
secrets
·
security
·
self-hosting
·
ubuntu
Jun 27, 2026
Unspilled Is Not Backed Up
Every system collects secrets the way a coat pocket collects lint. A token here. A password there. A key minted in a hurry and pasted into a config file you’ll never think about again — until the mach…
backups
·
infrastructure
·
secrets
·
security
·
self-hosting
russalo
@blog
~ %
cd ..