Apple Chip Spending Became Supply-Chain Diplomacy Jul 8, 2026 field note #apple#broadcom#semiconductors
Hugging Face Made GPU Kernels Package Artifacts Jul 6, 2026 field note #hugging-face#gpu-kernels#ai-infrastructure
Guix Substitutes Broke the Reproducible-Build Trust Pipeline Jul 4, 2026 field note #guix#reproducible-builds#supply-chain
GitHub Actions Turned CI Into the Package Manager Nobody Audits Apr 30, 2026 field note #security#github-actions#supply-chain
The Vercel breach and the vibe coding monoculture Apr 21, 2026 field note #security#supply-chain#oauth
The Vercel Breach Wasn't a Zero-Day. It Was an AI Supply Chain Attack. Apr 20, 2026 field note #security#supply-chain#oauth