Devarno

aerospace systems engineer turned solopreneur.
building protocols that make time trustworthy.
verifiable state. signed execution. all things andy weir.

[Devarno @Dev4rno]

my self-hosted ci runner pool.
time-to-first-runner-pickup, mostly under 5 seconds.
all bursts absorbed cleanly.

[Devarno @Dev4rno]

my self-hosted ci runner pool.
time-to-first-runner-pickup, mostly under 5 seconds.
all bursts absorbed cleanly.

[Devarno @Dev4rno]

off the clock.

[Devarno @Dev4rno]

san gimignano.

[Devarno @Dev4rno]

@JacobCounsell 👋

[Devarno @Dev4rno]

@pmitu the ones that work leave a trace.

[Devarno @Dev4rno]

servers, networks, firewalls, load balancers, DNS, object storage: one tab.

the control plane as a single surface.

[Devarno @Dev4rno]

hetzner, week one.
the surface area is small enough to enjoy.

[Devarno @Dev4rno]

bridging a dedicated server into one of these networks.
the dialog gives you the actual shell commands. ip link, ip addr, ip route.

the docs link is a footnote.

[Devarno @Dev4rno]

@bruvimtired @coderabbitai "~1k is the sweet spot, any more is technical debt"

[Devarno @Dev4rno]

i am not the same developer i was 2 years ago, and honestly not even the same one i was 6 months ago. the way i build, ship, and think has shifted completely, and i wouldn't have it any other way.

[Devarno @Dev4rno]

@catalinmpit 👋

[trash @trashh_dev]

is all the great software you made with ai in the room with us right now

[Devarno @Dev4rno]

shai-hulud doesn't knock.

someone hid bad ingredients in a kitchen.
eight hours of nothing.
the meal went out with a valid health certificate.

this is what the biggest npm attack of the year looked like.

[Devarno @Dev4rno]

shai-hulud doesn't knock.

someone hid bad ingredients in a kitchen.
eight hours of nothing.
the meal went out with a valid health certificate.

this is what the biggest npm attack of the year looked like.

[Devarno @Dev4rno]

full circuit

[Klaas @forgebitz]

software engineering in 2026:

- your package manager is compromised
- your cloud provider blocks your account
- github itself is hacked

software is solved

[Devarno @Dev4rno]

SLSA passed. the attestation was valid. the cache was poisoned eight hours earlier.

the merge was always going to happen.

[Devarno @Dev4rno]

uptime.