Essays

Arguments, not announcements

Two series, counted separately. Signal is what we defend: privacy, data destruction, key custody, verification and trust. Insight is how we build: engineering craft, product decisions, the things a small team learns shipping real software.

Every piece here contains at least one specific, checkable thing. If a claim cannot survive being looked up, it does not go out under this masthead.

SIGNAL · 15 5 min read 19 October 2026

Speed is cheap. Being right is the edge.

The new marketing stack removed the dependencies. It also removed the people who used to catch our mistakes. By Ramzi Hobeishy.

Read it →
SIGNAL · 14 9 min read 17 October 2026

We checked Antigravity. Then it checked us.

Google Antigravity wrote a report on itself. Claude Code fact checked every claim. Antigravity accepted every correction it reviewed, and got two details wrong doing it.

Read it →
INSIGHT · 13 8 min read 17 October 2026

Antigravity, eleven months in

What changed in Google's coding agent, what pushed it, and how it compares with Cursor, Claude Code, Devin and GitHub Copilot.

Read it →
SIGNAL · 12 4 min read 5 October 2026

Agents need access, not secrets

An agent that acts needs credentials. It almost never needs to see them. Let it request an action, never a value.

Read it →
INSIGHT · 11 7 min read 27 August 2026

Your job search tool is measuring the wrong thing

Every job platform reports how many roles it showed you. The number that matters is how many you could actually accept, and moving it is unglamorous engineering.

Read it →
SIGNAL · 10 7 min read 15 October 2026

An audit log needs a witness

A hash chain proves the middle of a log was not changed. It cannot prove the end is still there. Only a copy of the last line, held by someone the writer cannot reach, can do that.

Read it →
SIGNAL · 09 6 min read

Where the plaintext lives when AI reads your files

A model cannot read ciphertext. So the useful question about a confidential file is not whether it is readable at the model, but what in it is readable there, and whose it is.

Read it →
INSIGHT · 08 7 min read

The risk is the chain, not the agent

Identity, intent and ownership all fail at the first handoff. Why the structure can wait and the record cannot.

Read it →
SIGNAL · 07 9 min read

Delete has always been a lie

What actually happens when you delete a file, and why almost every promise that data was destroyed is made on faith.

Read it →
SIGNAL · 06 7 min read

Your computer knows something you don't

Mode errors are a design defect no bug tracker will ever record, because every instance looks like user error.

Read it →
SIGNAL · 05 8 min read

Demystifying Shamir's Secret Sharing: how to protect critical assets without single points of failure

The secret is never stored anywhere. It is the answer to an arithmetic question that needs a quorum to ask.

Read it →
SIGNAL · 03 5 min read

SilentBOX: a private encrypted vault, and what we just added to it

A vault that only exists on one phone is one dropped phone away from being gone.

Read it →