@danielw

The CRA's 24-hour clock is a cross-repo question. Your SBOM answers a different one.

1d ago · 16 min read · It is a Tuesday in late September 2026. A maintainer publishes a fix for an actively exploited vulnerability in a base image your platform team maintains: company/base-runtime. Somewhere in a Slack ch

Repo access was never the hard part

3d ago · 8 min read · Spend an hour reading the support forums for any of the big coding agents right now and you will notice the same thread, over and over, in slightly different words. Someone has their codebase split ac

Inferred context is not a dependency graph

4d ago · 16 min read · A pattern I keep running into, first as a consultant and lately in places like r/CursorAI: a developer is working in one repo, asks an agent to change something that touches a shared library living in

Symbol graphs and artifact graphs: why Sourcegraph stops where infrastructure starts

May 23 · 22 min read · A platform engineer asks two questions on the same morning. First: "I'm renaming this Go method — who calls it?" Second: "I'm bumping our shared Terraform networking module to v3.3.0 — which applicati

Cross-repo context is in product docs. The graph is not

May 20 · 17 min read · Where the vocabulary moved, what the products shipped against it, and the layer that's still uncovered. Six months ago, "cross-repo context" lived in dev.to posts and HN comments. Today it lives in ve