01MILESTONES
Milestones
The lab, one milestone at a time. Short on words by design — the write-ups carry the detail.
NEXT
NEXT
Deeper reliability engineering, and better write-ups of the work.
2026.10.17
PERSONAL PRODUCT
LexTrace gets mock exams and a study plan
Seeded kamoku A and B mock exams with a server-side deadline and a per-topic result, and a study plan with an exam date and a daily time budget shown in the daily check-in. The score is only a rough range from the learner's own history. Public invitation requests now have their own page for the invitation-only product.
2026.10.17
PLATFORM
London metrics reach the home monitoring
The London Prometheus is federated into the home one, with six alerts: metrics missing, target down, Zeebe backpressure, disk iowait, a low root disk and StatefulSets not ready. A seventh watches that the free-tier instances do not look idle to Oracle. Until then the dashboard showed nothing for London.
2026.10.17
PLATFORM
Every product release passes an automated review first
Verified on 17 October: pushes to MakeUp, Kashiwa Help and LexTrace pass an automated release gate. A local model on a Mac reviews the commit diff behind a Cloudflare Access service token; only an allow decision releases, and a block waits for a person. Until this day two of the three products were outside that gate's policy, so their pushes had not been released automatically.
2026.10.16
PERSONAL PRODUCT
Kashiwa Help stores no personal data
Accounts are pseudonymous handles with passkey-first sign-in; images, recovery secrets, device messaging and the email contact were removed, and free text is checked for personal data before it is saved. The change was reviewed in a browser before it shipped.
2026.10.16
PLATFORM
One knowledge authority: the Obsidian projection is retired
Verified on 16 October: the Obsidian copy of the knowledge base, its sync job and its token are gone. Git is the only knowledge authority, and the shared agent memory is cleaned of the old routing.
2026.10.16
HOME LAB
Camunda and OpenSearch move to a London node
Verified on 17 October: Camunda 8.10 and its OpenSearch run on a two-node Oracle Cloud cluster in London, reached from the home cluster over WireGuard. The cutover ran as approved, recorded changes; the Tokyo copies are stopped with their volumes kept. A Zeebe disk-flush saturation found on the way was fixed in configuration, not by a hand patch.
2026.10.09
PERSONAL PRODUCT
Kashiwa Help makes data freshness visible
Verified on 9 October: the help map hides ended events and marks stale data as possibly outdated. The AI digest retries once on a schema mismatch.
2026.10.09
PERSONAL PRODUCT
LexTrace becomes an invitation-only learning platform
Verified on 9 October: LexTrace combines repository reading, a vocabulary track and an IPA Fundamental Information Technology Engineer syllabus path with quick-scan mode. Access is invitation-only, with passkey sign-in and a daily review calendar.
2026.10.09
PLATFORM
Message Center notifications expire automatically
Verified on 9 October: Message Center notifications roll off automatically after 15 days.
2026.10.09
PLATFORM
High-risk deletion requires explicit authorization
Verified on 9 October: released storage volumes are deleted through an approved-deletion workflow. High-risk deletion requires explicit high-risk authorization; a plain approval was rejected once, as designed.
2026.10.09
PLATFORM
Node maintenance starts from an approval form
Verified on 9 October: patching and node reboots start from an approval form through an approved-change workflow. The root patch step uses a narrowly scoped polkit unit instead of general sudo. The rebuilt engine’s first patch run completed approval, execution, verification and commit.
2026.10.09
HOME LAB
Camunda 8.10 rebuilt from declared state
Verified on 9 October: the lab's orchestration stack was clean-installed on Camunda 8.10, chart 15.0.0, from a Git-authored rebuild kit. Its own workflows were down for about six minutes; state was re-provisioned from declared files, with no backup by decision.
2026.10.07
PLATFORM
A maintenance page that survives an origin outage
Published maintenance-diorama, an MIT-licensed Cloudflare Worker with a multilingual three.js scene. One variable switches every configured host to an honest 503 page, even when its origin is down.
2026.10.03
PLATFORM
The local model drafts governance decisions — under a Git policy
One policy file in Git decides which decision classes the local model may take, at what confidence and how many per day; security, data, credentials and high-severity findings are never delegated. Every AI decision is recorded and shown in the daily digest, and a review sweep the model drafts still closes only what the operator confirms.
2026.10.03
PLATFORM
Retirement leaves nothing behind
NOEMA and NOESIS were retired only after a final dump was verified off-site; MySQL went further — its last dump was stripped out of the backup snapshots while everything else in them was kept and re-checked. Each step ran as one approved change.
2026.10.03
HOME LAB
Every node on Ubuntu 26.04 LTS
A fresh compute node piloted the release; the worker and the control plane followed through 24.04 to 26.04.1. All three now run kernel 7.0 with Kubernetes 1.37 and Calico 3.32, and the control plane’s wired NIC moved from an out-of-tree driver to the in-kernel one.
2026.09.28
PLATFORM
Self-hosted mail reaches Message Center
Inbound mail now runs end to end: Cloudflare Email Routing to Email Worker, mail-intake with a bearer secret on /inbound only, cluster-internal mailserver, then a Message Center event.
2026.09.28
PLATFORM
Daily checks stop passing blind
The governance workflow schedules 54 daily checks; when a check cannot see, it fails as UNOBSERVED instead of passing blind. Safe Browsing status for every public hostname, CronJob progress, gateway egress coverage and the exposure audit joined that surface.
2026.09.27
PLATFORM
Production changes move through one approval
An AI-proposed change is a Git diff plus catalog runbooks. The worker previews it on a clean clone; one approval runs pre-actions, commits, pushes and polls verification. High-risk paths need a second confirmation, and an approval expires if a file in its diff changes on main.
2026.09.14
PLATFORM
The orchestration stack sheds Oracle, adds Optimize and AI review
Oracle retired from the orchestration stack entirely; a two-node OpenSearch cluster now backs Optimize analytics and cluster-wide logging, and local-model AI review returns to the governance loop.
2026.08.29
PERSONAL PRODUCT
LexTrace opens its first reading space
The public foundation now provides accounts, a personal space and local-model readiness. Repository import, source-linked vocabulary indexing and contextual explanations remain the explicit next milestone.
2026.08.24
PERSONAL PRODUCT
Kashiwa Help reaches its governed MVP
An independent civic project moves beyond a portal: Passkey-first accounts, private help requests, operator responses and a public board built only from real aggregates now form one participation loop.
2026.08.06
PLATFORM
Knowledge and operations become one closed loop
Plan-first execution, executable governance and durable Memory now return every verified result as the next task’s baseline.
2026.08.05
PERSONAL PRODUCT
The portfolio cuts inventory and keeps evidence
Reframed the site around three verifiable cases, removed unsupported visual and technology inventory, and made each claim lead to evidence and a decision.
2026.07–08
PLATFORM
The console closes its own operating loop
Canonical rules, executable gates and a read-only knowledge projection turn each production result into the next task’s verified starting point.
2026.07
PLATFORM
Harumi Platform consolidates the ops surface
Three separate admin tools retired into one console — their infrastructure re-homed with zero downtime before anything was deleted.
2026.07
PERSONAL PRODUCT
harumi.uk goes live
This site — built, deployed and served from the cluster it describes.
2026.07
EXPERIMENT
Front panel, reverse-engineered
A Windows-only display taught to speak Linux — then honestly reverted when the result was not legible.
2026
PERSONAL PRODUCT
NOEMA released
A reflective life system with its own two-step auth — and a scripted route around a GitLab permissions dead end.
2026
PERSONAL PRODUCT
MakeUp ships
A relationship app for any close pair on a single Kafka event bus — every feature gets notifications without extra wiring.
2026
HOME LAB
Camunda 8, full stack, running live
The full orchestration stack behind one unified OIDC domain: the live 8.8 → 8.9 upgrade remains history; production now runs 8.10.
2026
HOME LAB
The cluster comes up
Three bare-metal nodes, self-hosted GitLab, ArgoCD — the GitOps foundation everything else ships on.