§00/Writing · Page 5

Field notes from
the sovereign stack

Long-form, deeply technical writing for engineers who run what they own — Kubernetes security, Talos Linux, cloud repatriation, self-hosted AI, supply-chain integrity, and audit-grade rigor.

§05/Page 5

Showing 37–40 of 40

GitOps

Multi-Cluster GitOps at 100+ Clusters: When Argo CD Hits Its Limits and Flux's Distributed Model Wins

Hub-and-spoke vs distributed pull: scaling multi-cluster GitOps past 20 clusters, Argo CD control-plane bottlenecks, Flux air-gap patterns, and migration paths.

12 May 202620 min read

Security

Kubernetes Secrets Management Is Still Broken: ESO + Short-Lived Credentials Over Vault-Everything

Vault is the right backend, not the right interface. ESO + dynamic credentials + etcd encryption eliminate long-lived secrets from Kubernetes clusters.

5 May 202615 min read

Networking

eBPF and Cilium Are Eating the Service Mesh: What Zero-Trust Kubernetes Networking Looks Like Without Sidecars

How Cilium eBPF delivers zero-trust Kubernetes networking — identity-based policy, WireGuard node-to-node encryption, Hubble observability — without the sidecar complexity tax.

28 Apr 202618 min read

Platform Engineering

The Platform Engineering Trap: Why Golden Paths Fail Without a Policy Enforcement Layer

Golden paths without admission enforcement are just suggestions. Learn why DX and policy are the same design problem — and how to build a platform where the golden path is the only path that works.

21 Apr 202617 min read

§00 / WRITING

Executive Briefing

Thirty minutes to clarify your infrastructure risk

Walk us through your vendor footprint and regulatory constraints. We will tell you honestly where sovereignty creates leverage — and where it does not. No pitch deck. No obligation.

Book an executive briefing How we engage