Rust through Ops domains: type-state, ownership for key handling, sealed traits, newtype invariants.

• 2026-11-10A Rust auditor that re-derives from a deploy plan what each release must have produced, then checks a ledger in both directions for claims the plan does not support and outcomes the ledger left out
• 2026-11-09A Rust deploy decision kernel that puts a promoted release on a soak window with a restart budget, rolls back to the last confirmed release when the budget is spent, and keeps an honest ledger
• 2026-11-08A Rust supervisor decision kernel that restarts only the worker that failed, caps restarts per worker, and never reports the pair healthy after a sibling gave up
• 2026-11-07A Rust UI status contract that derives state, banner, can_act, and aria-live from an operator log and never paints healthy after a terminal failure
• 2026-11-06A Rust training job that checkpoints to a PVC directory, resumes after a kill, honours a retry budget, writes a versioned artifact with a SHA-256, and fails the holdout drift check honestly
• 2026-11-05A Rust program that treats a model swap as a deploy: an eval gate on counts, rollback to the last-good version, a sealed decision log, an artifact hash check, and an OpenAI-shaped stub with health and readiness probes
• 2026-11-04A Rust verifier for a deploy log sealed as a keyed hash chain (HMAC-SHA-256), which names edited, deleted and forged lines, counts every line in exactly one bucket, and shows what a chain alone cannot see: a cut tail and a rewrite by the key holder
• 2026-11-03A Rust deploy report that reads a JSON Lines deploy log, counts every line in exactly one bucket (readable or unreadable), names each unreadable line with the parser's own reason, and says so in its exit code
• 2026-11-02A Rust deployer that starts a candidate release on a second port, promotes it only if it reports ready before a deadline, and otherwise kills it, keeps the old release serving, and logs rolled_back with the reason
• 2026-11-01Liveness and readiness endpoints in axum, and a bounded supervisor loop in Rust that restarts a crashed service three times, then gives up and says so
• 2026-10-30Rhai, second pass: compile once, reuse the AST, call script functions from Rust, and report script errors with line and column
• 2026-10-29Loco JSON controllers: Path, Query and Json extractors, Loco's error mapping, and request tests
• 2026-10-28Cancellation in Tokio: what stops when you time out, select, abort, or drop
• 2026-10-27Testing an egui operator panel with no window and no GPU
• 2026-10-26Reading a ReplicaSet controller in Rust: adopt, release, scale, delete
• 2026-10-25kube-rs without a cluster: typed resources, a CRD from a Rust struct, and the client boundary
• 2026-10-23Putting a Rust hot path behind a Python import with PyO3 and maturin
• 2026-10-22Background jobs in axum 0.8 with only Tokio: a bounded queue, workers, and a clean drain
• 2026-10-22Topcoat 0.10 from zero: server-rendered Rust pages, browser signals, and shards
• 2026-10-21Serve SQLite reads from axum with rusqlite: spawn_blocking, row mapping, and 404s
• 2026-10-20Run a classifier in Rust with Candle: tensors, a Linear layer from safetensors, and batching
• 2026-10-20Toasty 0.11 from zero: an async Rust ORM where the struct is the model, contrasted with SeaORM
• 2026-10-19Verifying JWTs in axum 0.8: what valid means, in the order jsonwebtoken checks it
• 2026-10-19GPUI 0.2 from zero: a desktop counter with shared state, a render cycle, and flexbox layout
• 2026-10-18One Kubernetes-style resource in axum: resourceVersion, 409 Conflict, and Status errors
• 2026-10-16Rune embed: Context, modules, Vm, and budget
• 2026-10-16Dioxus 0.7 components, signals and the virtual DOM, by contrast with Leptos: a counter you can test without a browser
• 2026-10-15SeaORM 2.0: entities, ActiveModel, and a tested CRUD round trip
• 2026-10-15Ratatui 0.30 from zero: a full-screen terminal status panel with a draw loop, layout, and buffer tests
• 2026-10-14Axum Router: extractors, State, errors, and middleware
• 2026-10-13Leptos primary contrast — signals vs React state at the WASM edge
• 2026-10-13Rhai embed: Engine, Scope, host types, and operation limits
• 2026-10-12Loco skeleton: loco new, the route table, and the controller generator
• 2026-10-12clap derive: subcommands, ValueEnum, and try_parse_from tests
• 2026-10-11Tokio runtime: current_thread, multi_thread, and spawn_blocking
• 2026-10-09Rust serde over Kubernetes audit events: JSON lines, a stage-aware fold, and the Secret-read flag
• 2026-10-08Rust TF integration tests: validate -json, plan -json diagnostics, and the variable that must fail
• 2026-10-07Rust borrowing iterator with explicit lifetimes: Gaps<'a> over recovery points and an RPO breach filter
• 2026-10-06Rust typed Kubernetes Quantity: FromStr, Ord, checked add, and a ResourceQuota fit check
• 2026-10-05Final project: building a multithreaded web server
• 2026-10-05Rust serde over terraform plan JSON: resource_drift and relevant_attributes
• 2026-10-04Unsafe and macros
• 2026-10-04Rust enums and match for SNS filter policy shapes
• 2026-10-03Match guards on image references for a Binary Authorization census
• 2026-10-02Patterns
• 2026-10-01OOP / trait objects
• 2026-10-01Rust trait objects for queue delivery policies: Box<dyn Trait>, and the dispatcher that swaps backends
• 2026-09-30Async kube-rs: LabelSelector strings, Fargate pod labels, and the list that stays typed
• 2026-09-29Shared state, Send/Sync
• 2026-09-29Rust TF integration tests: std::process, serde_json, and the apply round-trip
• 2026-09-28Threads and message passing
• 2026-09-28Rust mpsc fan-out: one thread per subscription, and the sender that keeps the loop open
• 2026-09-27Rust over k8s-openapi: a drain preflight, and the kubectl List envelope that a typed PodList rejects
• 2026-09-26Rust serde over terraform show -json: the replace that hides in two actions
• 2026-09-25Smart pointers: Box, Rc, RefCell
• 2026-09-25Rust chunk_by group runs over sorted keys, called from Python via PyO3 and Maturin
• 2026-09-24Cargo, workspaces, crates.io
• 2026-09-23Improving our I/O project
• 2026-09-22Iterators
• 2026-09-21Closures
• 2026-09-18An I/O Project
• 2026-09-17Writing Automated Tests
• 2026-09-14Generics, Traits, and Lifetimes
• 2026-09-11Error Handling
• 2026-09-08Common Collections
• 2026-09-07Packages, Crates, and Modules
• 2026-09-04Enums and Match — the Case That Is Not a Sentinel
• 2026-09-03Structs — the Bundle That Is Not a Tuple
• 2026-09-02References, Borrowing, and Slices — the Borrow That Is Not a Copy
• 2026-09-01Understanding Ownership — one owner, drop, move, Copy, and the Copy That Is Not a Copy
• 2026-08-31Common Programming Concepts — mutability, types, functions, control flow, and the Statement That Is Not an Expression
• 2026-08-28Guessing Game — stdin, Result, rand, and the Guess That Is Not a Number
• 2026-08-27Getting Started — rustup, Hello World, and the File That Is Not a Crate
• 2026-07-17Rust's Typestate Pattern for an Attribution Gate
• 2026-07-06Rust Trait Objects and Enum Dispatch for a Model Cascade Router
• 2026-06-26Rust Iterator Adapters and flat_map for Cross-Asset Pair Signal Computation
• 2026-06-15Rust's Enum-Driven Deployment State Machine and the Typed Rollback Transition
• 2026-06-04Rust's Newtype Pattern and Smart Constructors for Capital-at-Risk Invariants
• 2026-06-01Rust's Trait Objects and Async Streams for Composable Eval Pipelines — Hedronite Dev Lesson
• 2026-05-29Rust's Type-State and Sealed Traits for Order-Lifecycle State Machines
• 2026-05-26Rust's Ownership Discipline Applied to Secret Handling
• 2026-05-23Rust's Ownership and Type-State Model Applied to Validator-Signing-Key Lifecycles
• 2026-05-20Rust's Type-State Pattern Applied to mTLS Connection Lifecycles