Security Logging Without Building a Surveillance System
Security logs should answer operational questions with the minimum personal data required and clearly controlled access.
CodeVelo Journal
Operational clarity for the systems behind fast digital work.
Practical writing on infrastructure, web engineering, observability, automation, and the physical systems that keep software reliable.
Infra
Networks, power, physical resilience
Dev
Fast frontends and maintainable systems
Hybrid
Where hardware, workflows, and code meet
Service pillars
Read by operational problem
Infra
Physical systems that protect uptime
Network design, power planning, cabling, monitoring, recovery, and small business infrastructure hardening.
DevSoftware that stays fast under pressure
Frontend performance, delivery workflows, observability, progressive enhancement, and maintainable engineering practices.
HybridThe operating layer between code and hardware
Automation, audits, runbooks, digital twins, telemetry, and the handoff points where systems usually fail.
Latest
Recent field notes
Tamper Evidence for Racks, Cabling, and Edge Equipment
Tamper evidence helps teams detect and investigate physical changes without pretending that seals alone prevent access.
Authorization Drift: When Permissions Outlive Their Purpose
Authorization drifts when roles, grants, service accounts, and exceptions remain after the work that justified them ends.
Vendor Remote Access Without Permanent Trust
Vendor access should be named, scoped, approved, observed, time-limited, and removed when the work is complete.
Dependency Admission Policies for the Build Pipeline
Dependency admission policies evaluate source, maintenance, license, integrity, and risk before packages enter the trusted build path.
Securing Out-of-Band Management Before You Need It
Out-of-band management must remain isolated, attributable, and available when the production network cannot be trusted.
Secrets Have Lifecycles Too
Secrets should be requested, issued, scoped, delivered, observed, rotated, revoked, and destroyed through a controlled lifecycle.
Network Segmentation by Risk, Not Just Department
Useful segmentation separates systems by trust, exposure, impact, and management needs instead of organizational charts alone.
Authentication Is Not Authorization
Authentication proves identity; authorization decides what that identity may do in a specific context.