> Originally published at https://www.vaines.org/posts/2026-03-24-the-comforting-lie-of-sha-pinning/ In March 2026, Trivy became the latest reminder that software supply chains are, at best, loosely held together with convention and trust. A typos...

> Originally published at https://www.vaines.org/posts/2026-05-09-why-hasnt-ai-improved-my-metrics/ I'm often asked about AI stuff as the rest of my blog might suggest. The world is currently scrambling around for how and where AI best accelerates ...