I build tools that make complex systems easier to see, reason about, and trust.
By day I'm a platform engineer in FinTech payments, working on CI/CD, GitOps, policy-as-code, and the guardrails that keep Kubernetes boring. Off the clock I keep circling one question: why should anyone believe a system is doing what we think it's doing? Most of what lives here is me poking at that question from a different angle.
- 🔐 ssda — a 24-chapter handbook on software supply-chain security, following the chain of custody from a developer's Git commit to a running workload.
- 🕸️ istio-viz — see your effective Istio L7 routes. It simulates Envoy's first-match-wins evaluation offline, so you can understand routing without touching a cluster.
- 🧭 apex — an internal developer platform where humans and AI agents share the same API, auth, and policy layer, with neither treated as a special case.
- 📸 PhotoSort — sorts years of photos by when they were actually taken, using weighted EXIF metadata. Built after one too many "where's that 2019 photo?" moments.
- 🌐 cloudflare-dns-util — manage Cloudflare DNS as a CSV, with a preview of every change before it's applied.
AI agents as first-class platform users · Linux internals · zero-trust identity (OIDC, SPIFFE, STS) · making operations calm and predictable
At wckd14.xyz I write about what production has taught me, mostly the failures:
- Building apex: an IDP for developers and AI agents alike
- What Istio, OIDC, and STS taught me about trust
- AWS "Pending" states are a blueprint for async deployments
- Terraform modules from first principles
Hope is not a strategy. — Betsy Beyer