DEPTH -004m · SHALLOWS
DEPTH -020m · REEF
Featured Expeditions
BACKEND
From raw electoral files to a dimensional model: building a data pipeline for Brazil's 2026 elections
The technical build behind the 2026 election coverage: an event-driven pipeline, a staging table with a schema guard, and a dimensional model drawn from three election cycles of reverse-engineering.
DEVOPS
From RBAC to AppArmor: six phases to harden k3s on a Raspberry Pi
How I took cluster-wide access away from my CI using only what Kubernetes and k3s already ship: RBAC, builds without the host socket, Pod Security, NetworkPolicy, user namespaces and AppArmor. For each phase: the problem, the concept, what changed and how to check it.
CYBERSECURITY
Intrusion detection in kube containers: uid invariants and kernel auditing
User namespaces left the Pi with a rule that is easy to check: every high uid belongs to a pod. How to check it without root, what an alert reveals about the compromised component, what it doesn't reveal about the attacker, and where auditd comes in.
DEPTH -080m · DEEP
Captain's Log
LOG 01Intrusion detection in kube containers: uid invariants and kernel auditing
LOG 02From RBAC to AppArmor: six phases to harden k3s on a Raspberry Pi
LOG 03My Site Went Down, and It Was My Neighbours' Fault
LOG 04Behind Intercept Brasil's donation ask: hypotheses on cache, edge, and origin
LOG 05Split to double: what I learned bringing two solutions to a hackathon
LOG 06From raw electoral files to a dimensional model: building a data pipeline for Brazil's 2026 elections
See my blog ▶DEPTH -400m · ABYSS
Got a project, a role or an idea?
Get in touch ▶