Writing
// 08 entries2026-08-19 Vuln Bank Part 4: Building the MCP Doorway Turning the retrieval engine into an MCP tool, including the custom protocol adapter, generated schemas, error handling, permissions, and an authentication bug. 14 MIN 2026-08-19 Vuln Bank Part 5: Measuring What the Bank Remembers The next phase of the vuln bank: making recall@k observable, mapping the knobs that affect it, and testing stronger or security-adapted models without forgetting the small VPS that has to run them. 11 MIN 2026-08-18 Vuln Bank Part 3: Two Legs, One List The vuln bank's read path combines semantic and lexical retrieval with Reciprocal Rank Fusion, reranking, and a recall@5 evaluation harness. 12 MIN 2026-08-17 Vuln Bank Part 2: Four Indexes and One Wrong Turn How the vuln bank stores knowledge, why its query patterns need four indexes, and why I replaced IVFFlat with HNSW before the first migration shipped. 10 MIN 2026-08-03 Vuln Bank Part 1: Tech Stack & Architecture The stack behind the vuln bank uses Effect, Hono, and Postgres while keeping the retrieval system separate from its MCP interface. 5 MIN 2026-08-02 Building a Vuln Bank for My Hackbot A build log about giving my bug-hunting agent a long-term memory: a curated vulnerability knowledge base served over MCP, including the tradeoffs and wrong turns. 5 MIN 2026-08-01 One GET, One Read A stored-markdown gadget in a newsroom's comments let me forge article reads and quietly poison the authenticated analytics the business relied on. 7 MIN 2026-01-19 What Burnout Taught Me About Threat Modeling My Own Life Attack surface isn't just for software. A personal post about limits, recovery, and sustainable research. 2 MIN