validgo-gen: OpenAPI → Go Validation Done Right

My colleague Yury built validgo-gen — an OpenAPI 3.0 → Go generator that finally distinguishes missing fields from explicit nulls from zero values. Two-layer validation, chi integration, idiomatic output.

June 6, 2026 · 1 min

ykvault: Stop Storing API Tokens as Plaintext

Are you still keeping API tokens in ~/.secrets? Any app you install can read them. ykvault encrypts every secret with a YubiKey challenge-response key — each get/set requires a physical touch, and the encrypted files are useless without your key.

June 6, 2026 · 2 min

I was afraid of agents yolo-mode for half a year

Why I built agent-landlock — a small Go wrapper that uses Linux Landlock LSM to give coding agents YOLO mode without letting them escape the project directory.

May 10, 2026 · 2 min

When TLS 1.3 Silently Dies Inside Your Android Proxy

A post-mortem of intermittent HTTPS failures across a mobile proxy fleet: TLS 1.3 handshakes silently dying on memory-starved Android devices — large multi-packet handshake messages, inflated by post-quantum key shares, stressing proxy buffers under memory pressure.

March 20, 2026 · 7 min