Engineering journal

Build logs from the field.

Architecture notes, agent governance, RAG pipelines, identity, and the tooling we ship — written while building Veristamp.

15 posts33 topicsRSS

Cream editorial cover: inject_filter shield applying AST isolation before queries reach Qdrant

LatestQQLQdrantSecurity

QQL inject_filter: AST Isolation Proven Before Execution

Learn how QQL 0.1.5 inject_filter wraps caller OR/NOT in outer AND, stamps UPSERT provenance, recurses CTEs, and fails closed on DDL operations.

Jul 30, 20268 min readRead

Cream editorial cover: Local Vector Search with in-process FastEmbed and qdrant-edge, no remote server

QQLQdrantPython

Local Vector Search with QQL Edge in Python and Node

Run QQL 0.1.5 local vector search in-process with pyqql-edge and nqql-edge: get real scores and exact error codes for bare USING and invalid IDs.

Jul 30, 202612 min readRead

Cream editorial cover: QQL 0.1.5 title with a hub diagram linking Rust, Python, Node, WASM, and Edge to Qdrant

QQLQdrantRust

QQL 0.1.5: One Query Language Across All Five Runtimes

Discover how QQL 0.1.5 ships QQL 1.2 across Rust, Python, Node, WASM, and edge with SHARD routing, fail-closed inject_filter, and multi-target embeds.

Jul 30, 202610 min readRead

Cream editorial cover: QQL WASM playground browser split between local analyze() and Qdrant REST Execute

QdrantWebAssemblyQQL

Build an In-Browser Qdrant Playground with QQL WASM

Build a QQL 0.1.5 browser playground with local analyze() for tokens, AST, and REST routes, CodeMirror editor, lazy MiniLM, and explicit REST execution.

Jul 30, 202611 min readRead

Diagram of the four main sources of Ubuntu server disk bloat: snapd cache, systemd journal, dangling Docker images, and orphan volumes

VPS SecuritySelf-Hosted AIDocker

Free Up Disk Space on Ubuntu Server: Clean Snapd & Docker

Learn how to free up disk space on Ubuntu Server. Clean snapd, journald logs, and orphan Docker volumes to safely reclaim 8-15GB of boot partition storage.

Jun 27, 202613 min readRead

Diagram showing how Docker DNAT routes traffic to the FORWARD chain, bypassing UFW INPUT rules, and how the DOCKER-USER chain restores control

VPS SecurityDockerSelf-Hosted AI

Docker Bypasses UFW: The DOCKER-USER Fix for Any Linux VPS

Docker bypasses UFW by routing published ports through the FORWARD chain. Learn how to apply the DOCKER-USER fix for any Linux VPS.

Jun 25, 202614 min readRead

An elegant architectural diagram showing QQL query transformation through JWT validation, rate limiting, and AST-level filter injection before executing on Qdrant.

QdrantSecurityEngineering

QQL Gateway: Zero-Trust Multi-Tenancy and AST Filter Injection for Qdrant

Vector databases ignore permissions, risking RAG leaks. Compare RAG post-filtering with Zanzibar-style pre-filtering, and learn how the QQL Gateway injects zero-trust AST filters before Qdrant queries.

Jun 20, 202613 min readRead

A side-by-side comparison diagram showing a locked, rigid hardcoded pipeline versus a dynamic agent loop querying Qdrant through the QQL gateway.

QdrantSecurityAI Agents

Secure Runtime Autonomy: QQL as the Dynamic Query Interface for Recursive Language Models

Hardcoding retrieval limits Recursive Language Models (RLMs). Discover how QQL acts as a secure, dynamic query layer via compile-time AST injection.

Jun 20, 202613 min readRead

Terminal-driven retrieval operations pipeline with QQL scripts, JSON artifacts, CI checks, and vector search diagnostics

RAGEngineeringAI Agents

qql-go and QQL Retrieval Operations for Qdrant

Vector search breaks quietly. Learn how qql-go turns QQL into a single-binary CLI for Qdrant retrieval operations, CI checks, and debug runbooks.

May 17, 202612 min readRead

Schema-first concept harvesting: documents to entities, relations, and an LLM wiki graph

AI AgentsKnowledge GraphsInformation Extraction

Schema-First Extraction for LLM Wikis with GLiNER2

Most RAG stacks fail at ingestion. Learn how schema-first extraction and GLiNER2 compile messy documents into a persistent LLM wiki and knowledge graph.

Apr 12, 202620 min readRead

Diagram showing an Oracle Always Free VPS secured with Tailscale running a PicoClaw AI agent

AI-AgentsSelf-Hosted AIOracle Cloud

Oracle Cloud Always Free Telegram Bot + AI Agent

Build an Oracle Cloud Always Free Telegram bot and private AI agent. Learn how to secure your VPS with Tailscale, PicoClaw, and UFW for zero public exposure.

Feb 15, 202612 min readRead

Abstract geometric visualization of document chunks splitting into structured blocks

Zero-TrustRAGRAG-Chunking

RAG Chunking Visualizer in Rust (WebAssembly): A Production-Ready Text Splitter Workbench

A Rust + WebAssembly RAG chunking visualizer that lets you debug text splitting, inspect semantic boundaries, and export production-ready chunks for embedding pipelines and vector databases.

Feb 13, 20268 min readRead