https://mah3uz.com/feed-posts.xml2026-10-31T09:00:00Zhttps://mah3uz.com/blog/seventeen-years-on-both-sides-of-the-line2026-10-31T09:00:00Z

Most organisations separate the people who build software from the people who run it. I have spent my career doing both. Here is what that taught me about designing systems that survive contact with production.

https://mah3uz.com/blog/letting-ai-agents-near-production2026-10-27T09:00:00Z

AI agents are becoming colleagues with keyboards. After years of managing who can do what on servers, I've applied the same principles to them — least privilege, explicit actors, approvals and honest boundaries — across four tools I build.

https://mah3uz.com/blog/native-linux-apps-in-rust-with-gpui2026-10-26T09:00:00Z

Building Sysman's desktop app on GPUI, the GPU-accelerated framework behind the Zed editor — why I chose it, the charts I had to write myself, and what it takes to ship a native Linux binary that installs cleanly everywhere.

https://mah3uz.com/blog/the-last-reading-before-a-crash2026-10-24T09:00:00Z

A monitor is most useful at the exact moment the machine dies — which is when most of them lose their data. Designing Sysman's collector around one rule, and what it took to keep that rule.

https://mah3uz.com/blog/release-scripts-that-refuse-to-half-ship2026-10-20T09:00:00Z

The worst release is the one that stops halfway — a tag pushed, a package published, the documentation still describing last week. Every project I ship uses the same pattern to make that impossible: check everything, ask once, then do it all.

https://mah3uz.com/blog/a-lock-screen-that-cannot-lock-you-out2026-10-08T09:00:00Z

Theming a login screen means writing to system directories as root; theming a lock screen means one bug can lock someone out of their own machine. How Darwan handles both — a supervised lock, and a root helper that trusts nothing it is given.

https://mah3uz.com/blog/why-this-site-runs-on-a-cms-i-built2026-09-29T09:00:00Z

Every developer eventually writes a content management system. I did it on purpose, after years of installing, patching and rescuing other people's. These are the decisions that made Nibble — and the one I got wrong first.

https://mah3uz.com/blog/sqlite-is-enough2026-09-24T09:00:00Z

For most of my career, "which database?" meant "which database server?" Today my default is a file. Here is how to run SQLite in production properly — WAL, backups, honest limits — and when to move on.