Jul 5, 2026
The wrong answer I gave about AI coding security
A customer asked me how I know my AI-written code is secure. I gave the defensive answer. Here is the better one.
Thoughts
Notes from the field.
On service business software, infrastructure, AI tools, and what running all of it in production actually looks like.
Jul 1, 2026
Your website should have a page made for AI to read
Docs sites already ship Markdown for agents. Most marketing sites still bury the useful text under chrome. I added the docs pattern here.
Jun 23, 2026
How I provision and harden a new Debian 12 server: the process, the prompt, and why order matters
Every server in my fleet gets the same two-phase setup: bootstrap first, lock down second. Here's the process, the agent prompt, and why I never combine the phases.
Jun 19, 2026
Your website now has two audiences: the person who visits and the AI that decides whether to recommend you
ChatGPT referrals started showing up in Vent Busters analytics. The site work I'd already done for humans turned out to matter for AI recommendations too.
Jun 12, 2026
Why route-aware booking matters more than pretty scheduling UI
Most service software treats online booking like a calendar drop box. The problems show up in the routes, and in the time technicians lose crossing town for jobs that should never have been booked that day.
Jun 5, 2026
Secrets, keys, and why AI agents make this harder to ignore
AI agents call APIs, read files, and take actions on your behalf. Every one of those capabilities runs on credentials. If your secret management is sloppy, you have a much larger problem than you did before.
Jun 2, 2026
Backups for a sprawling home infrastructure: the 3-2-1 strategy
Serenity went from project to system, and backups stopped being optional. Here's how I run 3-2-1 with Kopia, local storage, and Backblaze B2.