Exploring AI-first development, coding guardrails, and the architecture of disposability.
Large language models write surprisingly good Rust, but when you ask them for a formal proof they hallucinate invariants and invent syntax that no verifier...
LLMs can write Rust that compiles and even passes . What they cannot do reliably is write a formal proof that the code is correct for all possible inputs. The…
Why model checking beats days of production runtime for finding concurrency bugs, and how to apply it to your own code.
Waiting for race conditions to surface in production is not testing. It is hope dressed up as diligence. You can run your app for weeks, watch your metrics…
Bounded model checkers like Kani and relational model finders like Alloy let you verify properties with ordinary assertions and constraints.
You don't need to learn linear temporal logic to use a model checker. Tools like Kani, CBMC, and Alloy let you verify properties with ordinary assertions and…
Model checking tools like Kani let you verify Rust properties with assertions instead of formal proofs.
You can prove Rust code correct without writing a single proof. The tool that does it is called a model checker, and for Rust the most practical one right now…
Distributed bugs are expensive to fix after deployment. Model checking lets you find them before you write a single line of implementation code.
You can't unit test a distributed protocol. A unit test runs one process on one machine in one order. Your protocol runs ten processes across five machines in…
How infrastructure teams manage configuration across dev, staging, and production using per-context DSLs that make environment differences explicit and...
Your staging environment works. Your production environment does not. The diff between their files is 400 lines, and half of those lines are comments that…
LLMs hallucinate syntax because they sample tokens probabilistically.
Ask an LLM to generate a JSON object and it will eventually emit a trailing comma, an unescaped newline inside a string, or a bare word where a quoted key…
You can generate design tokens from plain English descriptions, but only if you treat the description as a bounded-context DSL with a schema contract and...
Yes, you can describe a theme in English and get a working design system. The catch is that the English description is not a prompt. It is a source file. And…
Parser generators are overkill for most bounded-context DSLs.
If you have ever opened a Yacc grammar file and wondered why building a language requires learning a second language, you are not alone. Parser generators are…
How to catch configuration mistakes before your application starts serving traffic, using schema validation and build-time checks.
Your application throws a three hours into a Friday evening. The stack trace points to a deeply nested property on a config object. The value is . Someone…