An opinionated list of Python frameworks, libraries, tools, and resources
RootRecord: A Practitioner's Map of the Ecosystem RootRecord builds multi-device software for people who want serious tools without unnecessary lock-in: mobile apps for weather and hazards, a full business office in your pocket, a central account hub, and browser-based Solana utilities for token creation and on-chain operations. A single RootRecord account ties licensing, cloud sync where applic
What if your Kubernetes cluster simply refused to run unsigned images? I spent some time experimenting with enforcing image provenance in a small Kubernetes setup using MicroK8s. The idea was simple: Only container images with valid cryptographic signatures are allowed to run in the cluster. For this I used: GitLab CI/CD (build + signing pipeline) Cosign / Sigstore (image signing) Kyverno (admissi
I'm doing the 100 Days of Solana challenge by MLH, and Week 2 just changed how I think about blockchain data entirely. Week 1 was about identity — generating keypairs, understanding wallets, getting devnet SOL. That part felt familiar, like setting up a dev environment. Week 2 was different. Week 2 was about reading the chain — and that's where the mental model shift actually happened. I expected
Been spending the last ~10 days getting hands-on with Solana as part of a hackathon. Went in expecting things to feel completely different from what I’m used to. It wasn’t as far off as I thought. What I’ve Done So Far Generated a keypair + airdropped devnet SOL Created a wallet and checked balance programmatically Understood SOL vs lamports Connected a browser wallet Read on-chain data (accounts,
Most teams I have worked with have one auth test in their suite. It looks like this: test('valid token verifies', () => { const token = signSync({ sub: 'user-1', aud: 'api://backend' }, secret); const result = verify(token, options); expect(result.valid).toBe(true); }); That test is fine. It is also a smoke test, not a regression suite. It catches the case where verification is completely b
The on-call alert at 02:14 said auth_5xx_rate spiked from 0.01 to 31.4. Not a deploy window. Not a traffic spike. Just thirty-one percent of authenticated requests failing for ~four minutes, then back to baseline. The cause was a JWKS rotation on the issuer side. New keys came in. Old keys went out. Caches in our service didn't refresh fast enough. Tokens signed with the new key were rejected beca
I've officially wrapped up the second week of my Solana deep dive. This week was all about moving from the "private" silos of Web2 databases to the "public" transparency of Blockchain and Solana accounts. Here are my key takeaways on how Solana handles data: 1. The Anatomy of an Account Unlike a row in a SQL database, every Solana account contains five specific fields: Lamports: The SOL balance (