A Friday night hotfix blocked by a 3-hour deployment pipeline. How classmap-authoritative autoloading made a missing PHP class invisible, and how to manually patch around it without installing anything on a production host.
Building JS projects in your home folder on a btrfs NAS generates tens of thousands of indexed files and hundreds of Docker layers. Read-write NVMe cache meant every Docker build burned through laptop SSDs that weren't rated for it.
Investigating why remote users were getting 5 Mbps through a WireGuard tunnel despite 400+ Mbps available on both ends. MTU fragmentation, TCP congestion collapse, and UDP buffer exhaustion.
Replacing per-service authentication with centralised SSO backed by Google OAuth. OIDC for Grafana, Immich, Portainer; forwardAuth for everything else.
Found that my *.internal.gread.uk services were publicly reachable via the VPS TCP proxy. Built a three-layer defence to fix it.
An Electron desktop app built to close the developer experience gaps a 70-engineer team was working around every day: devbox management, merge queue, AWS, RabbitMQ, and more.
Full-stack customer support infrastructure, designed as a graduate and still in production nine years later. Now powers AI agent workflows and is replacing the company's commercial helpdesk.
70 custom static analysis rules enforcing platform standards automatically at build time across a million-line codebase.
