Bassam Ismail

The library

Writing

Essays, field notes, and practical series about engineering leadership and the systems behind the work.

01

Series

Longer arcs that develop one problem across several parts, ordered from premise to practice.

Collection 013 parts

Three Machines, One Flake

A migration from chezmoi to Nix across a laptop and home server—and the public VPS that proved the right answer is sometimes not Nix.

Open series →
Collection 026 parts

Building dam.rs

Technical field notes from building dam.rs: storage economics, searchable archives, tenant-safe delivery, customer-owned infrastructure, integrity scrubbing, and accessible browsing at scale.

Open series →
Collection 033 parts

Building the Kindle I Wanted

Jailbreaking a Paperwhite, extending KOReader, and connecting it to a private reading stack.

Open series →
Collection 047 parts

Production Observability at System Boundaries

Field notes on proving telemetry across proxies, runtimes, queues, edge controls, and production logs without confusing configuration with evidence.

Open series →
Collection 056 parts

Mobile Release Engineering

Field-tested release engineering across iOS, Android, and macOS: promotion gates, build economics, signing custody, immutable artifacts, and user-installable proof.

Open series →
Collection 064 parts

Building a Slack Engineering Agent

How a multi-tenant Slack agent turns an @-mention into a pull request: the end-to-end path, the Postgres-backed task queue, the single policy gate that keeps an autonomous agent safe, and the ports-and-adapters spine that holds it together.

Open series →
Collection 073 parts

A Home for AI Artifacts

The internal platform where the team publishes AI-generated artifacts to durable, authenticated URLs instead of external services: what it does, how it's built on one small box, and the serverless start we walked back.

Open series →
Collection 087 parts

A spare MacBook as a home server

How I turned a spare MacBook into the most useful infrastructure I own: how I reach it with no public address, the background jobs that run my week, the media stack and what I deleted, one dashboard that makes it usable, and the local model, monitoring, and backups that let me trust it.

Open series →
Collection 096 parts

Building a school-assignment assistant for my daughter

Building a private school-assignment assistant for one child: scraping a portal with no API, an LLM that learns to discard, cached summaries, a small agent, and knowing what it costs.

Open series →
Collection 106 parts

Building Press

How I built Press, the editorial engine that writes from my work. One boundary of the system per part.

Open series →
02

Forward Deployed Engineering

Field reports from the boundary between software, operations, and the people using both.

From the field

Forward Deployed Engineering

A field-engineering series about customer-embedded discovery, production rollout, access, knowledge transfer, and the product feedback loops that turn one deployment into reusable leverage.

12 publishedExplore FDE
03

Agent Notes

Operating notes and reusable team practices from real work with coding agents.

Working with agents

Agent Notes

Evidence-backed notes on verification, handoffs, boundaries, and the habits that make agent work dependable.

19 publishedBrowse notes
04

All writing

The complete chronological archive, including every series part and standalone note.

Why Downloading a Protected File in an iOS PWA Required the Native Share Sheet
Sep 2026·Stuck viewing a file instead of saving it? Fix an iOS PWA file download by preparing the protected File and opening the native share sheet.
Engineering
When Database Sanitization Locked Real Users Out of Acceptance Testing
Sep 2026·Drupal database sanitization locked out real testers. Preserve approved identities while controlling credentials, email, and access in lower environments.
Engineering
The Ubuntu Server That Did Not Need Nix
Sep 2026·Planning to migrate Ubuntu to NixOS? See why rebooting, closing network exposure, bounding logs, and recovering config mattered more.
Engineering
The Home Server Where a Nix Migration Broke Two Jobs Silently
Sep 2026·Launchd jobs silently failed after migration. See how an explicit nix-darwin launchd PATH restored backups and exposed hidden dependencies.
Engineering
Moving My Mac from Chezmoi to Nix Without Losing the Parts That Write Back
Sep 2026·A chezmoi to Nix migration can break PATH precedence, writable configs, and rollback assumptions. Here’s how I moved my macOS dotfiles safely.
Engineering
Building a Documentation Skill That Tests Whether Code and Docs Stay Coupled
Sep 2026·Documentation drift lets code outrun its explanation. Catch it with a pull-request check that compares governed changes with relevant documentation.
Internal AI
Compose to Cluster
Sep 2026·SQLite databases kept corrupting on macOS. This Docker Compose to Kubernetes migration moved 30 services and rebuilt monitoring.
Personal
The green badge is not permission
Aug 2026·Signed URLs can outlive licence changes. DAM rights enforcement must recheck current policy at the delivery boundary before releasing assets.
Engineering
The library said the bytes were there and only the download disagreed
Aug 2026·Missing objects still look downloadable? Fix object storage integrity with direct store probes, bounded queue progress, and tenant-bound tokens.
Engineering
A grid that holds a hundred thousand assets and still answers the keyboard
Aug 2026·An accessible virtualized grid can expose 100,000 assets yet fail after 60. Align window loading, ARIA positions, and keyboard focus.
Engineering

Notes from Skippednote

New posts, occasionally.

Essays and field notes about engineering leadership, infrastructure, software, books, and the systems I build for myself.

No fixed schedule. Confirm by email, then hear from me only when there is something worth publishing.