Sign in

Devarno

@devarno.com
2.4K followers 727 following 1K posts

aerospace systems engineer turned solopreneur. building protocols that make time trustworthy. verifiable state. signed execution. agentic infrastructure. all things andy weir. devarno.com

PostsRepliesMedia
Devarno @devarno.com · 30/09/2026
this account lives on bluesky's servers. @null0.blue lives on mine, and the thread below lets you check every step.
000
Devarno @devarno.com · 15/09/2026
everything i know about swimming i learned in a lane with a wall at each end. saturday had none of that. the first km is the warmup. the last was the hardest, because the wind had been behind us the whole way out.
The derelict Millennium Mills building across grey dock water, its white concrete face streaked and windows broken, SPILLERS lettering on both end towers. A scattered line of swimmers and orange tow floats crossing the foreground under low cloud.
001
Devarno @devarno.com · 11/09/2026
before camp i wrote down eight things a pool could not tell me. it answered one. what my stroke does without a push-off to hide in. seven open. how cold a dock is at ninety minutes, which is a different question from the start. the camp was the wrong instrument. tomorrow is the right one.
000
Devarno @devarno.com · 09/09/2026
four days in a fifty metre pool, four hundred and fifty push-offs. four hundred and fifty times my feet hit the tiles and i got a second back that no training log records. on saturday there is nothing to hold onto.
000
Devarno @devarno.com · 20/08/2026
i named STRATT after her before i watched the film. nine minutes on astrophage, 1009 spin drives, and why the gate can't be bypassed.
devarno.com
the spec was already correct. then i watched the film. | Devarno
an MEng in Aeronautics & Astronautics and three years debugging aircraft network protocols, sitting in a dark cinema, reacting to the engineering of a fictional spacecraft, and the discipline that run...
000
Devarno @devarno.com · 17/08/2026
the other half of what i do. this one's about oracle, and about doors.
010
Devarno @devarno.com · 23/06/2026
half my life is protocols. the other half is a swimming pool. i started writing the second half down. devaqua.blue
devaqua.blue
devaqua.blue: making swimming as easy as sleeping
water competence as a mission. float first.
030
Devarno @devarno.com · 22/06/2026
resolving. did:web:devarno.com, no plc in the path. null0.blue
null0.blue
null0.blue
the protocol layer. signed history over rented trust.
110
Devarno @devarno.com · 21/06/2026
the handle resolved everywhere i checked. the identity still didn't work. null0.blue/journal/recognition
null0.blue
atproto is a naming system that learned to post — null0.blue
the handle resolved. every lookup i knew to run agreed. @null0.blue was live, pointing where i'd told it to point. the identity still didn't work.
000
Devarno @devarno.com · 19/06/2026
came to atproto expecting a social backend. found a routing problem in a costume i recognise.
000
Devarno @devarno.com · 16/06/2026
the factory floor. #buildinpublic
Dashboard card titled “The Factory Floor.” Subtitle: “scale, in numbers. names withheld until they ship.” Four stats: 31 organisations, 427+ repositories, 7 domains, 5 live.
140
Devarno @devarno.com · 01/06/2026
time-to-first-runner-pickup, mostly under 5 seconds. all bursts absorbed cleanly. #buildinpublic
HERMES dashboard, THROUGHPUT tab, 24 hour window. Three stacked
panels. Top: throughput stacked by conclusion, showing success in
green and failure in red over time, with a large success peak in
the back half of the day. Middle: concurrency over time, a sawtooth
pattern of ephemeral runner bursts escalating in amplitude across
the window. Bottom: queue wait distribution (time-to-first-runner-
pickup), with a tall 0-5s bar, a smaller 5-10s bar, a tiny 10-20s
bar, and all buckets from 20s to 1800s+ empty.
140
Reposted by Devarno
daniel wraith @danielroe.dev · 31/05/2026
I would like to stop having Thoughts about LLM usage
9811
Devarno @devarno.com · 28/05/2026
san gimignano.
A medieval Tuscan hill town of terracotta-roofed stone buildings, with a large brick church at its edge, overlooking a wide valley of green vineyards and rolling hills under a blue sky.
110
Reposted by Devarno
npmx @npmx.dev · 17/04/2026
the npmx.dev team is 250 humans strong now 🤍
github avatars of npmx contributors
211212
Devarno @devarno.com · 23/05/2026
hetzner, week one. the surface area is small enough to enjoy.
Hetzner Console dashboard showing a tile grid with resource counts across servers, load balancers, primary IPs, floating IPs, volumes, networks, firewalls, buckets, storage boxes, and DNS zones, alongside a map of European datacenter locations and a recent activities feed.
200
Reposted by Devarno
daniel wraith @danielroe.dev · 22/05/2026
💥 just released a github action: `uppt` it aims to be a very simple, secure release workflow for maintainers that adheres to best security practices ⚪ trusted, staged publishing on npmjs.com ⚪ github environment protection ⚪ generated release PR + changelog ⚪ automatic release + publish on merge ✨
1116228
Devarno @devarno.com · 21/05/2026
i am not the same developer i was 2 years ago, and honestly not even the same one i was 6 months ago. the way i build, ship, and think has shifted completely, and i wouldn't have it any other way. #buildinpublic
270
Devarno @devarno.com · 21/05/2026
the attacker's lifeline goes silent for the longest stretch. that's the attack.
A sequence diagram showing five actors across the top: the attacker, the prep room, the assembly line, the shop shelf, and the filing cabinet.
Four phases, separated by labelled bars.
Planting: the attacker offers to contribute to the project. the contribution is granted write access to the prep room. the attacker poisons the cache.
Eight hours — the attacker does nothing. the prep room is marked: armed and waiting.
Trigger: a legitimate merge starts the build. the prep room returns the poisoned cache. the assembly line ships to the shop shelf with a valid attestation. a note sits on the shop shelf: the certificate was genuine. the build was not.
Spread — 45 minutes: the assembly line harvests credentials from its own memory. injects into every reachable package on the shelf. accesses the filing cabinet. writes itself into .claude and .vscode — survives uninstall.
Dead man switch: the assembly line sends a dashed arrow back to the attacker — token rotated, home directory wiped.
The attacker's lifeline is silent for the longest stretch in the diagram. Everything that matters happens without them.
010
Devarno @devarno.com · 21/05/2026
shai-hulud doesn't knock. someone hid bad ingredients in a kitchen. eight hours of nothing. the meal went out with a valid health certificate. this is what the biggest npm attack of the year looked like.
static.klipy.com
Shai Hulud Sandworm Emerges in Dune
Alt: A sandworm erupts from the desert surface on Arrakis. The scale is incomprehensible — the mouth alone fills the frame. Several Fremen drop flat to the ground as it passes, faces pressed into the sand, making themselves invisible to something that navigates by vibration. The worm doesn't hunt them. It doesn't stop. It was never coming for them specifically. It was just moving, and they happened to be in the way.
100
Devarno @devarno.com · 20/05/2026
agents are part of the attack surface now.
Dark-themed code snippet listing .claude and .vscode configuration files on a purple background, shared alongside commentary that AI agents are now part of the latest Mini Shai-Hulud attack wave.
401
Devarno @devarno.com · 19/05/2026
still uptime.
GitHub contributions dashboard for the last 12 months. 8,606 contributions across 183 active days. Current streak 67 days, this week 1,033, daily average 47.0. Languages across 321 repos and 31 orgs: TypeScript 35.2%, Python 20.6%, MDX 15.6%, Go 9.5%, with smaller shares of JavaScript, HTML, Rust, and Shell.
010
Devarno @devarno.com · 19/05/2026
worth watching. www.youtube.com/watch?v=AgQ4...
youtube.com
Code with Claude 2026 | London
YouTube video by Claude
010
Devarno @devarno.com · 14/05/2026
the agent didn't bypass your controls. there was nothing to bypass. #buildinpublic
Architecture diagram showing Ring 2 (agent fleet) writing directly
to Ring 1 (consumer repository) with no control plane in the path.
Ring 2 contains three writer types: claude-code, copilot-agents,
and custom MCP servers — all described as stateless, drift-prone,
with no shared trust boundary. A redacted Ring 1.5 control plane
is shown as a dashed ghost element marked "not on the write path
today," with its gates obscured: schema gate, idempotency ledger,
provenance · MR cite, policy · CODEOWNERS · replay. Three failure
surfaces are identified: F-1 Silent (severity: high) — no schema
check, no constraint gates, no type coercion, payload accepted
never validated; F-2 Invisible (severity: high, forensics: nil) —
no idempotency key, no audit body, no MR cite, no trace-id
propagation, run unattributable and unreplayable; F-3 Bypass
(severity: critical, blast: prod) — branch protection, CODEOWNERS,
and required checks all bypassed, CI never runs, review never
happens. Ring 1 lists what consumers expect: schema-valid state,
attributable mutations, reviewed merges — and notes it delivers
none of the above. Legend distinguishes dashed agent writes
bypassing the control plane from solid red unsanitised writes
reaching the system of record.
251
Devarno @devarno.com · 12/05/2026
drift. #buildinpublic
Skyflow page screenshot presented on a light blue gradient background, with "@devarno.com" watermarked in small grey text in the lower right corner of the frame. The screenshot has rounded corners and shows: a SKYFLOW header in monospace caps with a small blue butterfly icon to the left, and "21 OF 437 NODES" in the upper right with "21" emphasised. A legend below the header identifies three edge types: solid lines for prerequisite, dashed for dependency, dotted for related. The word "DRIFT." appears at the right end of the legend row in cyan. The frame shows a dense dim network of translucent nodes filling the centre, right, and upper portions of the dark canvas. In the lower-left area, a small cluster of five bright fully-opaque labelled nodes is grouped together. From top to bottom and left to right, the labels read: Down While We Rebuild, Four Scores One Timeline, Drift Lift Jet Orbit, Bluesky-Native Analytics, and Why Not Hootsuite Buffer.
120
Devarno @devarno.com · 10/05/2026
now with skills.
Network graph on a dark background showing an agentic architecture. The graph contains around forty nodes connected by a dense web of solid and dashed lines. A legend in the bottom-left identifies three node types: blue circles for prompts, purple squares for cycles, and green circles for skills. Blue prompt nodes vary in size and dominate the graph. Five purple cycle nodes are scattered throughout, including one larger square in the bottom-right corner. Roughly fifteen smaller green skill nodes are distributed across the graph, particularly concentrated in the lower-middle region.
010
Reposted by Devarno
Savannah Ostrowski @savannah.dev · 07/05/2026
Python 3.15 beta 1 is here 🎉! This means that 3.16 (my first release as RM) is in development! Not to be sappy but this is such an honour. The trust the team has in me is not lost on me. I will do my best to make sure that 3.16 is the best Python yet. 🖤 discuss.python.org/t/python-3-1...
discuss.python.org
Python 3.15.0 beta 1 is here!
It’s the first beta and feature freeze! This is a beta preview of Python 3.15 Python 3.15 is still in development. This release, 3.15.0b1, is the first of four planned beta releases. Beta release...
68311
Devarno @devarno.com · 07/05/2026
agents land here #buildinpublic
Dark panel titled NETWORK displaying a force-directed graph of agentic infrastructure on a black background. Larger labelled nodes include repo-dag-generator, impeccable-handbook-ge…, task-acceptance-check, brand-asset-generator, and crumb-extraction-harness, with dozens of smaller unlabelled nodes scattered across the canvas connected by faint dotted lines. A legend at the bottom shows three node types: blue circles for prompt, purple squares for cycle, and green circles for skill. The footer reads @devarno.com.
350
Devarno @devarno.com · 07/05/2026
no sol unsigned #buildinpublic
Audit record retrieval form on a light background. Body text reads: "Enter a session id to open its signed audit record. Tokens are verified on the server; the rendered page works without JavaScript." Below the text, a labelled input field for "Session id" shows the placeholder "0c1bd34f…" in monospace. A dark red "Open record" button sits beneath the input.
121
Devarno @devarno.com · 06/05/2026
uptime #buildinpublic
GitHub-style profile dashboard for Alex (@Dev4rno), bio reads "gopher // rustacean // pythonista". Profile shows 28 followers, 32 following, 29 organisations. Last 12 months: 6,955 contributions across 175 active days (48%), with the best day on 20 Feb 2026 at 365 contributions. The contribution heatmap below uses blue squares on a dark background, with activity visibly intensifying from February through May. Cadence stats show a current streak of 58 days (also the all-time best), 679 contributions this trailing week, and a daily average of 39.7 across active days. Languages by bytes across 306 repos and 29 organisations: TypeScript 35.2%, Python 20.8%, MDX 16.1%, Go 9.6%, JavaScript 3.4%, HTML 3.3%, Rust 2.6%, Shell 2.2%.
110
Devarno @devarno.com · 05/05/2026
character building
Screenshot of Claude usage limits panel on the Max 20x plan. Current session shows 0% used. Weekly limits show: All models 100% used (resets in 10 min), Sonnet only 3% used, Claude Design 0% used.
120
Devarno @devarno.com · 21/04/2026
what a unit is. what a chain enforces. what happens to the rule you thought you changed. the documentation is done. #buildinpublic #stratt
130
Devarno @devarno.com · 28/03/2026
she saved earth by not asking permission. i named my prompt library after her. STRATT.
Eva Stratt from Project Hail Mary. Sandra Hüller walking toward camera through an institutional corridor, expression calm and certain. © Amazon MGM Studios.
010
Reposted by Devarno
Carl Poppa 🛸 @poppacalypse.bsky.social · 12/03/2026
The #1 beginner mistake: not starting. You spend all day thinking, perfecting your offer, rewriting cold emails. Mostly you worry what people will think. But you have no reputation to defend because you have no clients yet.
161
Devarno @devarno.com · 12/03/2026
the best DX still comes in a yellow carton #buildinpublic
A young man sitting on a set of brick stairs, holding a Chocomel carton - unbothered, unhurried, already thinking three moves ahead.
020
Devarno @devarno.com · 10/03/2026
youre already thinking like a systems architect. you just keep interrupting yourself to write the code. stop being the bottleneck. #buildinpublic
341
Reposted by Devarno
Jay 🦋 @jay.bsky.team · 09/03/2026
Some personal news: I’m transitioning from CEO to a new role as Bluesky’s Chief Innovation Officer! I’m excited to welcome @toni.bsky.team as our interim CEO. More here: bsky.social/about/blog/0...
bsky.social
A New Chapter for Bluesky - Bluesky
After several intense and incredible years building Bluesky from the ground up, I've decided to step back as CEO and transition to a new role as Bluesky's Chief Innovation Officer.
5736156920
Reposted by Devarno
ADHD Jesse @adhdjesse.com · 05/01/2026
The hidden burden of undiagnosed ADHD is constantly inventing excuses in an attempt to explain behavior that you don’t even understand yourself.
312113
Devarno @devarno.com · 05/01/2026
office keys in hand. @posthog.com swag on the desk. jitter juice ready. this is real now. #buildinpublic
PostHog care package on desk with t-shirt, socks, and stickers. Coffee cup in background. First day in the office.
161
Devarno @devarno.com · 02/01/2026
happy new year folks
Rearview mirror showing flames with years 2020-2025, while the open road ahead is labeled 2026. Leaving the chaos behind.
031
Devarno @devarno.com · 02/01/2026
got an email last year that changed my life. "we scraped github looking for [X]. your profile came up." 500k lines of code later, i finally understand what 'locked in' means. 2026 is going to be different. #buildinpublic
Screenshot of an email from startup cofounders explaining how they found me by scraping GitHub profiles for specific technical skills. Key details redacted.Claude Code analytics dashboard showing approximately 500,000 lines of code generated in the past month.
281
Reposted by Devarno
Jason Cohen @asmartbear.com · 01/12/2025
The more social media you read, the less attention you have for long form (whether articles or books). The more short videos you watch, the less attention you have for long videos and podcasts. Be mindful if you're spending time wisely for all your waking hours.
2141
Devarno @devarno.com · 28/11/2025
code first, words later. #buildinpublic
140
Devarno @devarno.com · 26/10/2025
masters nationals this weekend. PB in almost every event. wanted sub-27 for 50 free, got exactly 27.00 (lane 8). swimming gods have a sense of humour. months of training done while building in silence. time to ship the ecosystem. watch this wave. #buildinpublic #swimming
041
Devarno @devarno.com · 15/10/2025
failed another coding interview last week. im so bored of hour-long leetcode marathons that reward speed over sense. so ill keep building this orchestrator for my entire SaaS ecosystem. traceability all green so far. at least something actually passed. #buildinpublic
2121
Devarno @devarno.com · 15/09/2025
save for your next debug #buildinpublic {SYS-CTL} {SYS-REQ} what key architecture mistakes + corrections should be identified to fulfil the requirements outlined above? your design should be driven by clarity, precision, and implementation discipline, producing scalable and verifiable outputs
140
Devarno @devarno.com · 09/09/2025
dev maturity is unlocked when you realise: 1. everything is just JSON 2. github copilot is a goat 3. django is insanely powerful 4. refactor = distractor, fix the bottlenecks 5. keyframes are easy, youre just impatient 4 is a life lesson. 5 hit different. #buildinpublic
381
Reposted by Devarno
Mira | Indie Maker @miracodes.bsky.social · 04/09/2025
I've been playing with cursor a bit and find it frustrating, even though I only gave it very simple tasks. It hallucinates icons, doesn't correct them when I tell it to use the real ones & messes up functionality when I just ask it to change UI colors. How to work smoothly with it? #buildinpublic
10143
Devarno @devarno.com · 04/09/2025
morning espresso for thought ☕ keywords = what people search for: "best coffee grinder" tags = how your content connects internally: "kitchen/morning-routine/daily-grind" one targets discovery, the other builds relationships. completely different jobs. #buildinpublic #seo
181
Devarno @devarno.com · 02/09/2025
2 years ago: django api = full day, mvp deployment = full week. this morning: deployed staging/testing/prod for an authenticated vault server syncing to local JSON. controls + syncs entire app config straight from notion. ai made this stupidly fast. #buildinpublic
150