Writing

Engineering notes

Deep dives on OpenFOAM, local-first execution, Docker isolation, and browser geometry.

Hardening a Docker-based agent: Read-only rootfs, non-root, and digest pinning

What it takes to run OpenFOAM on customer hardware without handing a solver container the host.