A hand-typed branch name skips the machinery
A branch name tidier than the generated one silently opts out of every automation that discovers work by parsing it. The naming was the interface all along.
All posts
Where a secret lives should never be a decision
Six consumers each deciding where a keystore lives agree until one changes. One registry keyed by stack and category, one resolver, no direct reads.
Write it in commonMain until the compiler stops you
Starting in a platform source set means shared code never gets written. Default to commonMain and let the compiler decide what genuinely cannot live there.
A task that captures Project is a bug, not a gap
Calling it a configuration cache incompatibility frames a real defect as a missing feature. The task captures a live object where it should capture a value.
A number in CI is the only budget that holds
A budget that lives in a shared understanding has already moved. A baseline works because changing it leaves a reviewable diff with somebody's name on it.
Open it as a draft and let a human merge
A pull request that opens and merges in the same run is a push with extra steps. Draft is the one control that works without depending on permissions.
Every expect declaration is a promise you made twice
The compiler verifies an expect declaration's shape on every platform and nothing verifies its meaning. The narrowest declaration is the only promise you can keep.
The Play Store checks you only fail once
Price schedule, content rating, data safety, target API: the first-release prerequisites that reject a submission after the build already succeeded.
Thirty-six modules, one sync from deletion
Thirty-six fork modules were declared in a template-owned file that syncs by overwrite. The seam built for exactly this was present, documented and empty.
Your deploy said zero changed because it never looked
A deploy that ships whatever is already built never regenerates. Fifteen posts had new frontmatter, it reported 0 changed, and every link stayed stale.
Pin a commit, not a branch, when someone rehosts your images
A branch URL serves whatever the branch holds now, and a platform that rehosts your images keeps its copy forever. The pin must be immutable.
The keychain repair that broke signing for a day
Removing a stale tmp keychain cleared the default and broke iOS signing machine-wide, while the provisioning repo I spent a day suspecting was never at fault.