A short note on why branch names, commit metadata, and other Git inputs should be treated as untrusted data once automation, shells, and privileged runtimes start interpreting them.
Software, security, systems, music.
Robert Ryan Jennings
Web logs of a software development engineer, musician, artist and hockey player.
Essays on software engineering, mobile and backend security, architecture, older systems, and the occasional adjacent obsession.
Content expressed is my own and does not reflect the opinions of any entity.
Featured Essay
Git Is Becoming an Execution Surface
Browse the Archive
Explore by Topic
Popular Categories
Latest Entries
Recent Writing
Mobuild Envuscator and Digitalis
Mar 30, 2026 12:00PM
6 min read
1121 words
Two beerware-minded tools for reducing mobile configuration risk: one by hardening what ships in the client, the other by hardening what the backend is willing to deliver.
Anthesis Update: Memory, Governance, and Beyond the SDLC
Mar 27, 2026 12:00AM
13 min read
2640 words
Anthesis has shifted from one-shot agent ambitions toward governed memory, adapter abstractions, loop orchestration, SSDF enforcement, and Git-native policy verification.