Things I have built and operated, from operating systems to the tools around them.
Infrastructure
The multi-user NixOS a handful of us run and build on. We own it top to bottom and automate its upkeep, so we can be modern, self-built, and correctness-first.
Tooling
The Rust binary that assembles the bubblewrap sandbox Dolomite runs its untrusted-input apps in, coding agents included. It reads its whole configuration from the environment, resolves the bind mounts that decide what the container can reach, and reaps its helper processes in the one order that does not deadlock.
2025