https://reazromen.comArticles and listening noteshttps://reazromen.com/posts/caddy-admin-api-exposure.htmlhttps://reazromen.com/posts/caddy-admin-api-exposure.htmlThe admin endpoint can replace active configuration, so broad exposure changes the security boundary of the edge.Mon, 05 Oct 2026 00:00:00 +0000https://reazromen.com/posts/bn-rf-strength-is-not-quality.htmlhttps://reazromen.com/posts/bn-rf-strength-is-not-quality.htmlSignal strength can help estimate link conditions, but it is not the whole quality story. A strong desired signal can still be difficult to decode in a noisy or interfering environment. Strength and intelligibility answer different questions.Sat, 03 Oct 2026 00:00:00 +0000https://reazromen.com/posts/tailscale-home-server-continuity.htmlhttps://reazromen.com/posts/tailscale-home-server-continuity.htmlThe server stays the service anchor while the laptop or desktop can change; the tailnet keeps the relationship stable.Fri, 02 Oct 2026 00:00:00 +0000https://reazromen.com/posts/pcb-bringup-gdey029t71h-vs-t94-not-cosmetic.htmlhttps://reazromen.com/posts/pcb-bringup-gdey029t71h-vs-t94-not-cosmetic.htmlThe display firmware could be perfectly written for the wrong panel if the exact part number was not reconciled with the schematic.Thu, 01 Oct 2026 00:00:00 +0000https://reazromen.com/posts/production-changes-need-reconstructable-story.htmlhttps://reazromen.com/posts/production-changes-need-reconstructable-story.htmlA reliable delivery system leaves enough evidence to explain what changed, why, when and how it was verified.Tue, 29 Sep 2026 00:00:00 +0000https://reazromen.com/posts/pink-floyd-wish-you-were-here-presence-absence-and-the-person-missing-from-the-room.htmlhttps://reazromen.com/posts/pink-floyd-wish-you-were-here-presence-absence-and-the-person-missing-from-the-room.htmlPresence, Absence, and the Person Missing From the RoomSun, 27 Sep 2026 00:00:00 +0000https://reazromen.com/posts/repetition-as-satire.htmlhttps://reazromen.com/posts/repetition-as-satire.htmlHow repeating a phrase can turn language into advertising, propaganda, obsession, or ridiculeSat, 26 Sep 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-ego-brain-love-ego-and-the-stories-the-mind-builds-around-attachment.htmlhttps://reazromen.com/posts/system-of-a-down-ego-brain-love-ego-and-the-stories-the-mind-builds-around-attachment.htmlLove, Ego, and the Stories the Mind Builds Around AttachmentFri, 25 Sep 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-183-cosmos-astrobiology-metaphor.htmlhttps://reazromen.com/posts/systems-reality-183-cosmos-astrobiology-metaphor.htmlA search-space metaphor can suggest that life is a known object hidden somewhere in a finite database. We do not yet know which features of terrestrial life are…Wed, 23 Sep 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-007-cell-architecture.htmlhttps://reazromen.com/posts/systems-reality-007-cell-architecture.htmlEngineers can recognize boundaries, state, resource budgets, signaling and feedback loops. The membrane behaves a little like an interface, except the interface is physical material that the cell continuously builds,…Wed, 23 Sep 2026 00:00:00 +0000https://reazromen.com/posts/embedded-audio-tinny-speaker-not-codec-problem.htmlhttps://reazromen.com/posts/embedded-audio-tinny-speaker-not-codec-problem.htmlField feedback described the speaker as very tinny even though the digital call path was working.Wed, 23 Sep 2026 00:00:00 +0000https://reazromen.com/posts/ims-stopped-looking-like-a-pbx.htmlhttps://reazromen.com/posts/ims-stopped-looking-like-a-pbx.htmlThe three CSCF roles made IMS easier to understand when I treated them as separate signalling responsibilities instead of one oversized SIP server.Tue, 22 Sep 2026 00:00:00 +0000https://reazromen.com/posts/pin-maps-belong-in-the-bring-up-evidence.htmlhttps://reazromen.com/posts/pin-maps-belong-in-the-bring-up-evidence.htmlOne wrong GPIO can imitate a codec, driver or clocking failure.Mon, 21 Sep 2026 00:00:00 +0000https://reazromen.com/posts/caddy-502-backend-works-by-ip.htmlhttps://reazromen.com/posts/caddy-502-backend-works-by-ip.htmlA 502 usually means the browser-to-Caddy leg worked and the Caddy-to-upstream leg did not.Mon, 21 Sep 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-dns-failure-dead-server.htmlhttps://reazromen.com/posts/field-note-2026-dns-failure-dead-server.htmlTest the known address before rebooting a host just because its name stopped resolving.Sun, 20 Sep 2026 00:00:00 +0000https://reazromen.com/posts/pinned-image-digests-reproducible-container-dependency.htmlhttps://reazromen.com/posts/pinned-image-digests-reproducible-container-dependency.htmlA mutable tag tells you what to ask for; a digest tells you what bytes you actually accepted.Sat, 19 Sep 2026 00:00:00 +0000https://reazromen.com/posts/disk-usage-alerts-need-warning-and-critical-bands.htmlhttps://reazromen.com/posts/disk-usage-alerts-need-warning-and-critical-bands.htmlA single disk threshold gives operators no distinction between early cleanup work and a filesystem that is close to stopping writes.Sat, 19 Sep 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-130-networks-philosophy.htmlhttps://reazromen.com/posts/systems-reality-130-networks-philosophy.htmlNetworks encourage relational thinking: an entity's role may depend as much on its position among others as on intrinsic…Thu, 17 Sep 2026 00:00:00 +0000https://reazromen.com/posts/pcb-bringup-es8311-es7210-split-audio-problem.htmlhttps://reazromen.com/posts/pcb-bringup-es8311-es7210-split-audio-problem.htmlSpeaker and microphone failures were easy to discuss as one audio problem even though playback and capture used different codecs and different analog paths.Wed, 16 Sep 2026 00:00:00 +0000https://reazromen.com/posts/measure-what-operator-user-actually-cares-about.htmlhttps://reazromen.com/posts/measure-what-operator-user-actually-cares-about.htmlCPU and container counts are supporting signals; service reachability, backup validity and call-path health are closer to the real objective.Tue, 15 Sep 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-clocked-playout.htmlhttps://reazromen.com/posts/field-note-2026-clocked-playout.htmlNetwork packets arrive when the network allows; speakers need samples when the audio clock demands them.Mon, 14 Sep 2026 00:00:00 +0000https://reazromen.com/posts/bn-music-engineering-metaphor-limit.htmlhttps://reazromen.com/posts/bn-music-engineering-metaphor-limit.htmlIn audio engineering, music can be represented as a signal. We can ask about samples, spectra, and dynamic range. But those measurements cannot contain all of a song's meaning or personal value. One representation is not a substitute for another experience.Sun, 13 Sep 2026 00:00:00 +0000https://reazromen.com/posts/pcb-bringup-tinny-speaker-not-es8311-problem.htmlhttps://reazromen.com/posts/pcb-bringup-tinny-speaker-not-es8311-problem.htmlField feedback described the EVT speaker as very tinny even though the digital voice path and codec communication were functioning.Thu, 10 Sep 2026 00:00:00 +0000https://reazromen.com/posts/lora-reticulum-ten-km-starts-link-budget.htmlhttps://reazromen.com/posts/lora-reticulum-ten-km-starts-link-budget.htmlThe desire for multi-kilometre range could easily turn into a single-variable question about how many dBm the radio can transmit.Thu, 10 Sep 2026 00:00:00 +0000https://reazromen.com/posts/human-and-workload-identity-should-not-share-auth-method.htmlhttps://reazromen.com/posts/human-and-workload-identity-should-not-share-auth-method.htmlOIDC fits interactive operators; AppRole fits non-interactive services. Combining them weakens both lifecycle models.Wed, 09 Sep 2026 00:00:00 +0000https://reazromen.com/posts/bn-weather-observation-model.htmlhttps://reazromen.com/posts/bn-weather-observation-model.htmlBefore interpreting a temperature for a location, first ask where the number came from. A nearby station observation, a model grid value, and a later reanalysis product are not the same kind of evidence.Sun, 06 Sep 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-099-language-history.htmlhttps://reazromen.com/posts/systems-reality-099-language-history.htmlEvolutionary theory, linguistics and information theory each illuminated different aspects of language without reducing it to one…Thu, 03 Sep 2026 00:00:00 +0000https://reazromen.com/posts/dead-synthetic-targets-removed-not-hidden.htmlhttps://reazromen.com/posts/dead-synthetic-targets-removed-not-hidden.htmlPlaceholder or obsolete probe targets can stay in configuration after architecture changes and permanently pollute availability dashboards.Wed, 02 Sep 2026 00:00:00 +0000https://reazromen.com/posts/embedded-audio-udp-arrival-should-not-be-speaker-clock.htmlhttps://reazromen.com/posts/embedded-audio-udp-arrival-should-not-be-speaker-clock.htmlRTP arrived in bursts even when packet sequence was mostly healthy, so directly pacing I2S from receive callbacks made network jitter audible.Tue, 01 Sep 2026 00:00:00 +0000https://reazromen.com/posts/prod-monitoring-why-up-is-one-of-the-weakest-signals-in-production.htmlhttps://reazromen.com/posts/prod-monitoring-why-up-is-one-of-the-weakest-signals-in-production.htmlA production-engineering deep dive into why “up” is one of the weakest signals in production, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.Sun, 30 Aug 2026 00:00:00 +0000https://reazromen.com/posts/prod-monitoring-ip-addresses-belong-in-log-content-more-often-than-labels.htmlhttps://reazromen.com/posts/prod-monitoring-ip-addresses-belong-in-log-content-more-often-than-labels.htmlA production-engineering deep dive into ip addresses belong in log content more often than labels, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.Sun, 30 Aug 2026 00:00:00 +0000https://reazromen.com/posts/the-voiceware-service-template-small-yaml-big-responsibility.htmlhttps://reazromen.com/posts/the-voiceware-service-template-small-yaml-big-responsibility.htmlHow a short Service template binds a logical name to selected pods and a target port.Sat, 29 Aug 2026 00:00:00 +0000https://reazromen.com/posts/what-a-switch-actually-learns-from-a-mac-address.htmlhttps://reazromen.com/posts/what-a-switch-actually-learns-from-a-mac-address.htmlA switch learns from source MAC addresses, not destination addresses. Watching the table populate makes unknown unicast, flooding and forwarding much easier to reason about.Fri, 28 Aug 2026 00:00:00 +0000https://reazromen.com/posts/pink-floyd-pow-r-toc-h-what-happens-when-sound-arrives-before-meaning.htmlhttps://reazromen.com/posts/pink-floyd-pow-r-toc-h-what-happens-when-sound-arrives-before-meaning.htmlWhat Happens When Sound Arrives Before MeaningThu, 27 Aug 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-ota-first-boot-transaction.htmlhttps://reazromen.com/posts/field-note-2026-ota-first-boot-transaction.htmlA successful flash write does not prove the new image can initialize hardware, load state and stay healthy.Wed, 26 Aug 2026 00:00:00 +0000https://reazromen.com/posts/lost-in-hollywood-the-dream-that-eats-the-dreamer.htmlhttps://reazromen.com/posts/lost-in-hollywood-the-dream-that-eats-the-dreamer.htmlHollywood is usually sold as a destination. This song hears it as a machine: something that attracts people with a dream, then slowly teaches them what they are willing to trade to keep chasing it.Mon, 24 Aug 2026 00:00:00 +0000https://reazromen.com/posts/removing-the-downlink-suppressor-improved-the-stable-build.htmlhttps://reazromen.com/posts/removing-the-downlink-suppressor-improved-the-stable-build.htmlMore signal processing is not automatically better audio.Sat, 22 Aug 2026 00:00:00 +0000https://reazromen.com/posts/putting-a-pbx-in-docker-did-not-remove-the-networking.htmlhttps://reazromen.com/posts/putting-a-pbx-in-docker-did-not-remove-the-networking.htmlContainerizing a SIP service added another address and NAT boundary, which made port publishing, advertised addresses and RTP ranges more important rather than less important.Sat, 22 Aug 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-der-voghormia-grief-ritual-and-memory-without-a-conventional-rock-ending.htmlhttps://reazromen.com/posts/system-of-a-down-der-voghormia-grief-ritual-and-memory-without-a-conventional-rock-ending.htmlGrief, Ritual, and Memory Without a Conventional Rock EndingFri, 21 Aug 2026 00:00:00 +0000https://reazromen.com/posts/ota-state-stable-requires-active-device-evidence.htmlhttps://reazromen.com/posts/ota-state-stable-requires-active-device-evidence.htmlA release could look administratively complete before any device proved it was actually running.Thu, 20 Aug 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-codec-before-acoustics.htmlhttps://reazromen.com/posts/field-note-2026-codec-before-acoustics.htmlProve clocks, framing, routing and gain before judging microphones, speakers or enclosure acoustics.Wed, 19 Aug 2026 00:00:00 +0000https://reazromen.com/posts/pink-floyd-run-like-hell-fear-turned-into-command-and-momentum.htmlhttps://reazromen.com/posts/pink-floyd-run-like-hell-fear-turned-into-command-and-momentum.htmlFear Turned Into Command and MomentumTue, 18 Aug 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-two-device-sanity.htmlhttps://reazromen.com/posts/field-note-2026-two-device-sanity.htmlA small closed call loop isolates core SIP/RTP behavior before carrier and DID complexity is introduced.Tue, 18 Aug 2026 00:00:00 +0000https://reazromen.com/posts/pink-floyd-mudmen-instrumental-weight-without-a-verbal-story.htmlhttps://reazromen.com/posts/pink-floyd-mudmen-instrumental-weight-without-a-verbal-story.htmlInstrumental Weight Without a Verbal StoryMon, 17 Aug 2026 00:00:00 +0000https://reazromen.com/posts/device-provisioning-is-an-identity-problem-disguised-as-wifi-setup.htmlhttps://reazromen.com/posts/device-provisioning-is-an-identity-problem-disguised-as-wifi-setup.htmlGetting credentials onto a device is easy; binding the right device to the right backend identity is the security boundary.Sun, 16 Aug 2026 00:00:00 +0000https://reazromen.com/posts/pink-floyd-jugband-blues-when-self-awareness-turns-into-distance.htmlhttps://reazromen.com/posts/pink-floyd-jugband-blues-when-self-awareness-turns-into-distance.htmlWhen Self-Awareness Turns Into DistanceSat, 15 Aug 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-science-reason-spirit-and-the-problem-of-treating-one-as-the-enemy-of-the-other.htmlhttps://reazromen.com/posts/system-of-a-down-science-reason-spirit-and-the-problem-of-treating-one-as-the-enemy-of-the-other.htmlReason, Spirit, and the Problem of Treating One as the Enemy of the OtherFri, 14 Aug 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-healthcheck-real-dependency.htmlhttps://reazromen.com/posts/field-note-2026-healthcheck-real-dependency.htmlA process can be alive while the service contract its neighbors depend on is broken.Fri, 14 Aug 2026 00:00:00 +0000https://reazromen.com/posts/sip-load-balancing-became-an-architecture-problem-not-a-proxy-rule.htmlhttps://reazromen.com/posts/sip-load-balancing-became-an-architecture-problem-not-a-proxy-rule.htmlOnce dialog state, media anchoring and backend health mattered, forwarding INVITEs round-robin was the easy part.Thu, 13 Aug 2026 00:00:00 +0000https://reazromen.com/posts/sqn-sync-in-ims-aka-was-the-authentication-detail-i-kept-missing.htmlhttps://reazromen.com/posts/sqn-sync-in-ims-aka-was-the-authentication-detail-i-kept-missing.htmlIMS AKA stopped looking like a simple password check once I traced the sequence number and resynchronization path.Wed, 12 Aug 2026 00:00:00 +0000https://reazromen.com/posts/first-asterisk-lab-mostly-a-networking-lab.htmlhttps://reazromen.com/posts/first-asterisk-lab-mostly-a-networking-lab.htmlTwo softphones and one Asterisk server were enough to show that a phone call is really several network problems stacked together: registration, signaling, media and NAT.Tue, 11 Aug 2026 00:00:00 +0000https://reazromen.com/posts/raft-snapshot-is-backup-one-node-not-ha.htmlhttps://reazromen.com/posts/raft-snapshot-is-backup-one-node-not-ha.htmlSeparating the main secret authority from the Transit seal service improves trust boundaries, but both still share the same physical host failure domain.Mon, 10 Aug 2026 00:00:00 +0000https://reazromen.com/posts/kamailio-diameter-integration-exposed-sip-assumptions.htmlhttps://reazromen.com/posts/kamailio-diameter-integration-exposed-sip-assumptions.htmlKamailio felt familiar on the SIP side, but Diameter peer state and application routing forced me to treat the second protocol on its own terms.Fri, 07 Aug 2026 00:00:00 +0000https://reazromen.com/posts/firmware-release-ignored-zconf-h-release-provenance-failure.htmlhttps://reazromen.com/posts/firmware-release-ignored-zconf-h-release-provenance-failure.htmlThe V133A isolated workspace contained synchronized feature files, but Git staging stopped because a required managed-component zconf.h was intentionally ignored.Fri, 07 Aug 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-090-consciousness-philosophy.htmlhttps://reazromen.com/posts/systems-reality-090-consciousness-philosophy.htmlConsciousness turns objective description back on the describer: physical systems exist for which something seems to be happening from the…Thu, 06 Aug 2026 00:00:00 +0000https://reazromen.com/posts/block-io-per-container-exposes-noisy-neighbors.htmlhttps://reazromen.com/posts/block-io-per-container-exposes-noisy-neighbors.htmlHost disk latency can rise because one container is performing heavy reads or writes while every other service only sees the consequence.Wed, 05 Aug 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-spiders-surveillance-thought-and-the-feeling-of-being-watched.htmlhttps://reazromen.com/posts/system-of-a-down-spiders-surveillance-thought-and-the-feeling-of-being-watched.htmlSurveillance, Thought, and the Feeling of Being WatchedSun, 02 Aug 2026 00:00:00 +0000https://reazromen.com/posts/bn-metric-label-cardinality.htmlhttps://reazromen.com/posts/bn-metric-label-cardinality.htmlMetric labels let us divide one measurement in many useful ways, but every new combination of label values can create another time series. Greater detail also carries collection, storage, and query cost.Sat, 01 Aug 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-downlink-suppression.htmlhttps://reazromen.com/posts/field-note-2026-downlink-suppression.htmlA processor that removes noise can also remove speech detail when its assumptions do not match the signal.Fri, 31 Jul 2026 00:00:00 +0000https://reazromen.com/posts/pcb-bringup-usb-c-not-factory-debug-strategy.htmlhttps://reazromen.com/posts/pcb-bringup-usb-c-not-factory-debug-strategy.htmlA product can have a USB-C connector and still lack a reliable programming/recovery path for failed units.Thu, 30 Jul 2026 00:00:00 +0000https://reazromen.com/posts/one-rgb-led-is-enough-when-its-states-are-designed.htmlhttps://reazromen.com/posts/one-rgb-led-is-enough-when-its-states-are-designed.htmlA single status light can become confusing if color, blink and priority are not treated as a protocol.Thu, 30 Jul 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-bounce-juvenile-energy-used-as-deliberate-excess.htmlhttps://reazromen.com/posts/system-of-a-down-bounce-juvenile-energy-used-as-deliberate-excess.htmlJuvenile Energy Used as Deliberate ExcessWed, 29 Jul 2026 00:00:00 +0000https://reazromen.com/posts/first-note.htmlhttps://reazromen.com/posts/first-note.htmlA small engineering blog can be served directly through Tor without opening an inbound port on the home router.Tue, 28 Jul 2026 00:00:00 +0000https://reazromen.com/posts/why-subnetting-felt-hard-until-i-stopped-memorizing-tables.htmlhttps://reazromen.com/posts/why-subnetting-felt-hard-until-i-stopped-memorizing-tables.htmlSubnetting became much easier once I treated it as address boundaries and binary arithmetic instead of a collection of shortcut tables.Mon, 27 Jul 2026 00:00:00 +0000https://reazromen.com/posts/pink-floyd-speak-to-me-beginning-with-the-evidence-of-a-life-already-in-motion.htmlhttps://reazromen.com/posts/pink-floyd-speak-to-me-beginning-with-the-evidence-of-a-life-already-in-motion.htmlBeginning With the Evidence of a Life Already in MotionSun, 26 Jul 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-innervision-searching-inward-without-pretending-the-answer-is-simple.htmlhttps://reazromen.com/posts/system-of-a-down-innervision-searching-inward-without-pretending-the-answer-is-simple.htmlSearching Inward Without Pretending the Answer Is SimpleSat, 25 Jul 2026 00:00:00 +0000https://reazromen.com/posts/prod-monitoring-monitoring-secrets-without-monitoring-secret-values.htmlhttps://reazromen.com/posts/prod-monitoring-monitoring-secrets-without-monitoring-secret-values.htmlA production-engineering deep dive into monitoring secrets without monitoring secret values, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.Thu, 23 Jul 2026 00:00:00 +0000https://reazromen.com/posts/aec-starts-with-the-correct-far-end-reference.htmlhttps://reazromen.com/posts/aec-starts-with-the-correct-far-end-reference.htmlAn echo canceller cannot remove playback it never receives as a reference signal.Wed, 22 Jul 2026 00:00:00 +0000https://reazromen.com/posts/bn-information-not-meaning.htmlhttps://reazromen.com/posts/bn-information-not-meaning.htmlHow much information a message carries and how meaningful that message is to a person are different questions. Mathematical communication theory can measure specific aspects of uncertainty and representation without measuring human memory, context, or value.Mon, 20 Jul 2026 00:00:00 +0000https://reazromen.com/posts/prod-monitoring-thermals-on-a-2014-mac-mini-are-a-production-signal.htmlhttps://reazromen.com/posts/prod-monitoring-thermals-on-a-2014-mac-mini-are-a-production-signal.htmlA production-engineering deep dive into thermals on a 2014 mac mini are a production signal, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.Sun, 19 Jul 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-127-networks-architecture.htmlhttps://reazromen.com/posts/systems-reality-127-networks-architecture.htmlNetwork engineering makes the distinction concrete: topology matters, but routing policy, congestion, protocol state and failure behavior matter…Sat, 18 Jul 2026 00:00:00 +0000https://reazromen.com/posts/why-observability-workloads-end-up-clickhouse.htmlhttps://reazromen.com/posts/why-observability-workloads-end-up-clickhouse.htmlLogs and traces are wide, append-heavy events that are usually filtered by time and a few fields, then aggregated. That workload shape explains the attraction to a columnar analytical database better than any benchmark headline.Tue, 14 Jul 2026 00:00:00 +0000https://reazromen.com/posts/bn-programming-communication-system.htmlhttps://reazromen.com/posts/bn-programming-communication-system.htmlIf programming begins as syntax memorization, the relationships inside a system can arrive late. A tiny communication system introduces useful questions immediately: who asks, who answers, and what happens when no answer arrives?Tue, 14 Jul 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-contact-policy-backend.htmlhttps://reazromen.com/posts/field-note-2026-contact-policy-backend.htmlSIP addresses endpoints; the product still needs an explicit policy for who is allowed to contact whom.Mon, 13 Jul 2026 00:00:00 +0000https://reazromen.com/posts/tailscale-reticulum-underlay.htmlhttps://reazromen.com/posts/tailscale-reticulum-underlay.htmlReticulum does not need Tailscale, but its TCP interfaces can use a Tailscale path just like any other private IP network.Sun, 12 Jul 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-116-complexity-mechanism.htmlhttps://reazromen.com/posts/systems-reality-116-complexity-mechanism.htmlComplexity often comes from interaction, feedback, adaptation, heterogeneity and multiple timescales rather than merely from having many components. Simple parts can create behavior that is difficult to predict once…Sun, 12 Jul 2026 00:00:00 +0000https://reazromen.com/posts/secure-esp32-ota-chain-of-trust.htmlhttps://reazromen.com/posts/secure-esp32-ota-chain-of-trust.htmlHTTPS protects a firmware transfer in transit. A production OTA design also has to prove image authenticity, select boot slots safely, confirm health, permit recovery, and prevent rollback to revoked vulnerable firmware.Fri, 10 Jul 2026 00:00:00 +0000https://reazromen.com/posts/redis-rdb-aof-durability-is-rpo/index.htmlhttps://reazromen.com/posts/redis-rdb-aof-durability-is-rpo/index.htmlRDB and AOF are not just file formats. They encode how much acknowledged state you are willing to lose, how much persistence overhead you accept, and how recovery should work.Thu, 09 Jul 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-151-time-mechanism.htmlhttps://reazromen.com/posts/systems-reality-151-time-mechanism.htmlModern physics treats time as part of spacetime: measured durations can differ with relative motion and gravity. Thermodynamics adds an arrow associated with irreversible macroscopic…Wed, 08 Jul 2026 00:00:00 +0000https://reazromen.com/posts/firmware-release-known-good-binary-is-a-release-asset.htmlhttps://reazromen.com/posts/firmware-release-known-good-binary-is-a-release-asset.htmlThe clearest audio build could have disappeared under the next firmware experiment if it remained only a file in a working build directory.Tue, 07 Jul 2026 00:00:00 +0000https://reazromen.com/posts/why-the-firmware-has-to-stay-pbx-agnostic.htmlhttps://reazromen.com/posts/why-the-firmware-has-to-stay-pbx-agnostic.htmlHard-coding one PBX would turn infrastructure choice into a firmware release dependency.Mon, 06 Jul 2026 00:00:00 +0000https://reazromen.com/posts/ifnotpresent-can-hide-image-changes-during-testing.htmlhttps://reazromen.com/posts/ifnotpresent-can-hide-image-changes-during-testing.htmlHow pull policy interacts with mutable image tags and node caches.Sun, 05 Jul 2026 00:00:00 +0000https://reazromen.com/posts/wifi-csi-looked-like-a-sensor-hidden-inside-the-radio.htmlhttps://reazromen.com/posts/wifi-csi-looked-like-a-sensor-hidden-inside-the-radio.htmlChannel State Information exposes how multipath changes, which turns ordinary Wi-Fi links into crude environmental sensors.Sat, 04 Jul 2026 00:00:00 +0000https://reazromen.com/posts/failure-isolation-in-a-voice-platform-is-a-product-feature.htmlhttps://reazromen.com/posts/failure-isolation-in-a-voice-platform-is-a-product-feature.htmlWhy runtime boundaries influence user experience even though users never see Kubernetes.Sat, 04 Jul 2026 00:00:00 +0000https://reazromen.com/posts/comfortably-numb-sometimes-you-discover-a-song-after-you-have-heard-it.htmlhttps://reazromen.com/posts/comfortably-numb-sometimes-you-discover-a-song-after-you-have-heard-it.htmlI had heard Comfortably Numb before. But during a period when I was deeply introspective and sad, I heard the guitar again and it felt like a song I had never actually discovered. After that, it became one of the songs I returned to on lonely, melancholic days.Sat, 04 Jul 2026 00:00:00 +0000https://reazromen.com/posts/prod-monitoring-warning-and-critical-are-different-response-contracts.htmlhttps://reazromen.com/posts/prod-monitoring-warning-and-critical-are-different-response-contracts.htmlA production-engineering deep dive into warning and critical are different response contracts, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.Wed, 01 Jul 2026 00:00:00 +0000https://reazromen.com/posts/internal-ca-trust-operator-onboarding-problem.htmlhttps://reazromen.com/posts/internal-ca-trust-operator-onboarding-problem.htmlA valid internal TLS certificate is still unusable on a new operator device until its trust root is installed correctly.Wed, 01 Jul 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-u-fig-crowds-ideology-and-the-violence-of-simplifying-people.htmlhttps://reazromen.com/posts/system-of-a-down-u-fig-crowds-ideology-and-the-violence-of-simplifying-people.htmlCrowds, Ideology, and the Violence of Simplifying PeopleTue, 30 Jun 2026 00:00:00 +0000https://reazromen.com/posts/sticky-heartbeat-results-must-not-rewrite-a-new-ota-assignment.htmlhttps://reazromen.com/posts/sticky-heartbeat-results-must-not-rewrite-a-new-ota-assignment.htmlOld local status text can outlive the release that originally produced it.Sun, 28 Jun 2026 00:00:00 +0000https://reazromen.com/posts/prod-monitoring-a-fresh-backup-can-still-be-corrupt.htmlhttps://reazromen.com/posts/prod-monitoring-a-fresh-backup-can-still-be-corrupt.htmlA production-engineering deep dive into a fresh backup can still be corrupt, grounded in the 2014 Mac mini hserver observability stack and its accepted runtime evidence.Fri, 26 Jun 2026 00:00:00 +0000https://reazromen.com/posts/why-i-prefer-a-separate-edge-layer-over-hiding-routing-in-the-app.htmlhttps://reazromen.com/posts/why-i-prefer-a-separate-edge-layer-over-hiding-routing-in-the-app.htmlThe trade-off between fewer containers and clearer network responsibility.Wed, 24 Jun 2026 00:00:00 +0000https://reazromen.com/posts/systems-reality-145-mathematics-philosophy.htmlhttps://reazromen.com/posts/systems-reality-145-mathematics-philosophy.htmlMathematics is where symbolic reasoning most dramatically escapes immediate experience and then returns with predictions about…Mon, 22 Jun 2026 00:00:00 +0000https://reazromen.com/posts/system-of-a-down-aerials-identity-ego-and-the-freedom-of-letting-the-self-become-smaller.htmlhttps://reazromen.com/posts/system-of-a-down-aerials-identity-ego-and-the-freedom-of-letting-the-self-become-smaller.htmlIdentity, Ego, and the Freedom of Letting the Self Become SmallerMon, 22 Jun 2026 00:00:00 +0000https://reazromen.com/posts/self-hosted-ntfy-removes-external-dependency.htmlhttps://reazromen.com/posts/self-hosted-ntfy-removes-external-dependency.htmlThe alert sink originally targeted a public ntfy service, which made production notification depend on infrastructure outside the hserver control boundary.Mon, 22 Jun 2026 00:00:00 +0000https://reazromen.com/posts/field-note-2026-default-route-fact.htmlhttps://reazromen.com/posts/field-note-2026-default-route-fact.htmlA topology view should consume routing state rather than infer a gateway from labels or layout.Sun, 21 Jun 2026 00:00:00 +0000https://reazromen.com/posts/totp-qr-code-is-a-secret-enrollment-ceremony.htmlhttps://reazromen.com/posts/totp-qr-code-is-a-secret-enrollment-ceremony.htmlScanning the QR code transfers long-lived secret material; it should be treated more carefully than an ordinary setup screen.Sat, 20 Jun 2026 00:00:00 +0000https://reazromen.com/posts/rollback-in-gitops-is-simple-only-when-releases-are-identifiable.htmlhttps://reazromen.com/posts/rollback-in-gitops-is-simple-only-when-releases-are-identifiable.htmlConnecting Git reverts, ArgoCD reconciliation, and immutable artifacts into one recovery model.Sat, 20 Jun 2026 00:00:00 +0000https://reazromen.com/posts/terraform-plan-json-is-automation-interface/index.htmlhttps://reazromen.com/posts/terraform-plan-json-is-automation-interface/index.htmlThe JSON form of a plan exposes structured resource actions, configuration and state for automation. It can also expose sensitive values in plaintext, so policy tooling must treat it as protected data.Fri, 19 Jun 2026 00:00:00 +0000https://reazromen.com/posts/backup-and-rollback-before-touch-production.htmlhttps://reazromen.com/posts/backup-and-rollback-before-touch-production.htmlThe safest time to decide how to recover is before the change has modified the evidence you depend on.Fri, 19 Jun 2026 00:00:00 +0000https://reazromen.com/posts/automation-needs-a-permission-model.htmlhttps://reazromen.com/posts/automation-needs-a-permission-model.htmlAutomation should be fast inside a narrow authority boundary rather than powerful enough to mutate anything.Fri, 19 Jun 2026 00:00:00 +0000