WORK
Products, client work and open experiments. Commercial details are anonymized — the engineering is real.
PureScript compiled to WebAssembly on the frontend, a Haskell backend, and CRDT-based synchronization — end-to-end encrypted, local-first.
The app works offline by default. Sync is a merge, not a conflict dialog: every replica converges without a server in the critical path.
Runs on NixOS hosts we operate ourselves — deployed from Git, monitored with Prometheus, backed up with restic and monthly restore drills.
A growing SaaS team with no ops department: a hand-configured VPS, deploys as a 40-minute ritual, and backups nobody had ever restored.
The stack moved to declarative NixOS, one flake per environment: atomic switches, automated restic backups, Prometheus + Loki with alerts that only fire when humans are needed.
Deploys are one command and take seconds. Twelve months, 99.9%+ uptime, zero 3 a.m. surprises — and the team can read its own infrastructure.
A backend where business rules lived in scattered validation code. Every change was a risk; tests asserted what the type system could have guaranteed.
Incremental rewrite of the core domain into Haskell — invariants in types, a typed servant API, the strangler pattern in front of the legacy system.
Invalid states stopped compiling. Fewer regressions, faster feature work — and the domain is documented by the compiler, not by tribal memory.
We wanted first-hand knowledge of where open hardware stands — not from slides, but from a board on the desk.
Mainline U-Boot and OpenSBI bring-up, device trees written by hand, kernel configuration trimmed until it built reproducibly from a Nix expression.
A working RV64 reference platform and a documented bring-up guide — the base for customer appliances we ship today.