From the workbench
We write about the systems we build: architecture, war stories and honest numbers. No listicles.
Gunnar: a git server with no database, no shell and no OS
A git server in Rust that spawns nothing, stores no database, and boots as PID 1 on bare metal. Refs persist through an Apache Arrow IPC log, stock git is the judge, and a fetch costs 21 MB where the best rival needs 262 MB.
August 2026Korp: one app over the whole data path, and a UI robots can read
Spark pipelines, a live graph, time-travelling Iceberg tables and maps in one Rust app. The whole data path runs from a single command, and the entire UI state dumps to JSON so tests need no display.
July 2026tunnr: a distroless WireGuard appliance that boots tunnel-first
A bare-metal WireGuard VPN client in Rust: no shell, no package manager, one binary as PID 1, and the tunnel up before any other packet leaves the box. Plus a pure-Rust harness that boots it under UEFI and proves it ran.
July 2026Garmr: building a one-person SOC in Rust, with an AI analyst in the loop
Why the 2026 security landscape splits into agentic platforms without infrastructure and Rust infrastructure without a brain, and what it took to build the intersection: one binary that ingests, detects and lets an LLM investigate every alert for half a cent each.
Follow along with RSS.