Field notes / 001—003
Security guides
from real systems.
Reproducible patterns, failure cases, and the evidence that separates “configured” from “proven.”
3 guides
Building a fail-closed malware gate for automated downloads
How to keep untrusted files away from media services until scanning, verification, and release all succeed.
Aug 28, 2026 · 12 min read
02Proving a container can only reach the internet through a VPN
A practical verification method for network namespaces, kill switches, DNS behavior, and restart persistence.
Aug 24, 2026 · 10 min read
03A safer reverse proxy pattern for a private home lab
Split DNS, isolated listeners, internal TLS, and rollback planning without publishing services to the internet.
Aug 18, 2026 · 9 min read