Skip to content
Type to search the engineering journal.Supports full-text indexing and terms matching.

Journal Library

Explore the archive of engineering signals.

Diagram of the four main sources of Ubuntu server disk bloat: snapd cache, systemd journal, dangling Docker images, and orphan volumes
VPS SecuritySelf-Hosted AI+3 more

Free Up Disk Space on Ubuntu Server: Clean Snapd & Docker

Learn how to free up disk space on Ubuntu Server. Clean snapd, journald logs, and orphan Docker volumes to safely reclaim 8-15GB of boot partition storage.

13 min readRead
Diagram showing how Docker DNAT routes traffic to the FORWARD chain, bypassing UFW INPUT rules, and how the DOCKER-USER chain restores control
VPS SecurityDocker+3 more

Docker Bypasses UFW: The DOCKER-USER Fix for Any Linux VPS

Docker bypasses UFW by routing published ports through the FORWARD chain. Learn how to apply the DOCKER-USER fix for any Linux VPS.

14 min readRead
An elegant architectural diagram showing QQL query transformation through JWT validation, rate limiting, and AST-level filter injection before executing on Qdrant.
QdrantSecurity+3 more

QQL Gateway: Zero-Trust Multi-Tenancy and AST Filter Injection for Qdrant

Vector databases ignore permissions, risking RAG leaks. Compare RAG post-filtering with Zanzibar-style pre-filtering, and learn how the QQL Gateway injects zero-trust AST filters before Qdrant queries.

13 min readRead
A side-by-side comparison diagram showing a locked, rigid hardcoded pipeline versus a dynamic agent loop querying Qdrant through the QQL gateway.
QdrantSecurity+3 more

Secure Runtime Autonomy: QQL as the Dynamic Query Interface for Recursive Language Models

Hardcoding retrieval limits Recursive Language Models (RLMs). Discover how QQL acts as a secure, dynamic query layer via compile-time AST injection.

13 min readRead
Terminal-driven retrieval operations pipeline with QQL scripts, JSON artifacts, CI checks, and vector search diagnostics
RAGEngineering+3 more

qql-go and QQL Retrieval Operations for Qdrant

Vector search breaks quietly. Learn how qql-go turns QQL into a single-binary CLI for Qdrant retrieval operations, CI checks, and debug runbooks.

12 min readRead
Schema-first concept harvesting: documents to entities, relations, and an LLM wiki graph
AI AgentsKnowledge Graphs+2 more

Schema-First Extraction for LLM Wikis with GLiNER2

Most RAG stacks fail at ingestion. Learn how schema-first extraction and GLiNER2 compile messy documents into a persistent LLM wiki and knowledge graph.

20 min readRead
Diagram showing an Oracle Always Free VPS secured with Tailscale running a PicoClaw AI agent
AI-AgentsSelf-Hosted AI+3 more

Oracle Cloud Always Free Telegram Bot + AI Agent

Build an Oracle Cloud Always Free Telegram bot and private AI agent. Learn how to secure your VPS with Tailscale, PicoClaw, and UFW for zero public exposure.

12 min readRead
Abstract geometric visualization of document chunks splitting into structured blocks
Zero-TrustRAG+4 more

RAG Chunking Visualizer in Rust (WebAssembly): A Production-Ready Text Splitter Workbench

A Rust + WebAssembly RAG chunking visualizer that lets you debug text splitting, inspect semantic boundaries, and export production-ready chunks for embedding pipelines and vector databases.

8 min readRead
A contained sandbox with glowing code and policy gates, symbolizing governed execution
AI-AgentsMCP+1 more

Governed Code Mode: From Tool-Calling to Zero-Trust Execution

Cloudflare, Anthropic, Google, and others are converging on a new pattern: let agents write code, but only inside a governed, zero-trust runtime.

10 min readRead
Abstract geometric representation of automated workflows connecting nodes
TutorialsDocker+2 more

Self-Host n8n on Docker for Free: Beginner Setup

Self-host n8n on Docker for free. PostgreSQL, ngrok, and a pre-built JSON workflow in one docker compose up. No cloud fees, no workflow caps.

12 min readRead
A split technical diagram showing a generic lock icon representing commodity AuthN versus a complex neural network representing custom AuthZ
ArchitectureSecurity+1 more

Custom Identity Provider Trap: What We Should Have Built

A custom identity provider is a trap when you build commodity AuthN. The better path is an identity control plane.

10 min readRead