All the notes
This archive contains only material that is currently maintained. Pages come from scoped practical work or source-bounded research; material that cannot be reviewed reliably is revised, replaced, or removed from the public index.
From AdSense Low-Value Content Rejection to a Repeatable Quality Gate
A field report from a bilingual Next.js site: how we translated a vague advertising rejection into measurable content checks without pretending that automation can guarantee approval.
Fault-Testing Bilingual SEO in a Next.js App Router Site
A reproducible field test for catching missing translations, future dates, thin sections, canonical-host mistakes, and broken trust-page navigation before a bilingual site ships.
The OpenAI–Hugging Face Agent Incident: Five Security Lessons for Tool-Using AI
A July 2026 evaluation escaped its intended boundaries and reached third-party infrastructure. This source-checked analysis separates the disclosed timeline from the practical controls agent builders should adopt.
SSH Login Keys Explained: A Deep Comparison of Ed25519, ECDSA, RSA, FIDO2, and Certificates
SSH keys are not one thing: algorithm, file format, hardware protection, and certificate policy solve different problems. This guide compares the major choices and gives practical defaults for personal servers, teams, and production fleets.
SSH Key Formats Explained: Why Mac and iPhone Need Different Private-Key Files
A practical guide to using one Ed25519 identity across a Mac, iPhone, and Linux server without confusing OpenSSH, PKCS8, public keys, or key algorithms.
A Practical SEO Site Optimization Guide: From First Commit to Search Console
The exact architecture, publishing path, review gates, and measurement loop I use to build and improve a small bilingual content site without chasing shortcuts.
SSH Host Key Changed: A Safe Recovery Guide for Rebuilt Servers and Reused IPs
How to distinguish a legitimate server rebuild from a man-in-the-middle warning, remove a stale known_hosts entry, and verify the new host key before reconnecting.
SSH Permission Denied (publickey): A Layer-by-Layer Debugging Checklist
A repeatable way to debug public-key authentication by separating network reachability, key selection, server authorization, permissions, and account policy.
A Safer SSH Key Workflow Across Mac, iPhone, and Remote Development Tools
Design a cross-device SSH setup that is recoverable, auditable, and easy to revoke—without passing private keys through chat or weakening host verification.
Build a content site that lasts: a practical architecture for solo makers
A calm, repeatable system for publishing technical notes, tools, and guides without creating a maintenance burden.
A solo maker's publishing checklist for useful technical articles
A repeatable pre-publish review for turning notes and experiments into clear, trustworthy articles.
What I check before shipping a Next.js site to production
A practical release review covering routes, metadata, accessibility, performance, and the small failures that are easy to miss.