Two series, counted separately. Signal is what we defend: privacy, data destruction, key custody, verification and trust. Insight is how we build: engineering craft, product decisions, the things a small team learns shipping real software.
Every piece here contains at least one specific, checkable thing. If a claim cannot survive being looked up, it does not go out under this masthead.

Identity, intent and ownership all fail at the first handoff. Why the structure can wait and the record cannot.
Read it →
What actually happens when you delete a file, and why almost every promise that data was destroyed is made on faith.
Read it →
Mode errors are a design defect no bug tracker will ever record, because every instance looks like user error.
Read it →
The secret is never stored anywhere. It is the answer to an arithmetic question that needs a quorum to ask.
Read it →
A vault that only exists on one phone is one dropped phone away from being gone.
Read it →