russalo@blog
russalo@blog ~ % ls -t posts/ | grep "#security"

#security

3 published posts

Before an AI reads a file you didn't write Modern AI agents don't just read a file — they act on it. So point something that can't be talked into anything at it first. That's what I built.
Turn Your Secrets Into Reproducible Artifacts: age + chezmoi Across Your Machines You can’t commit secrets to git — so they sit in plaintext, one copy each, backed up nowhere, and a dead disk takes them with it. I made the case for why that’s the real problem already; this post is…
Unspilled Is Not Backed Up Every system collects secrets the way a coat pocket collects lint. A token here. A password there. A key minted in a hurry and pasted into a config file you’ll never think about again — until the mach…
russalo@blog ~ % cd ..