The Arcs

A hundred and thirty-one field notes, filed by date. Which is the least interesting thing about any of them.
Date order is how a journal gets written. It is not how a story gets read. Open the archive at the top and you meet last Tuesday’s firewall incident with no idea that the same fight has been running since April — that this is chapter nine, and chapters one through eight explain it.
So: five arcs. Five recurring fights this haus keeps having, each one an ordered path through the notes that belong to it. Follow an arc end to end and you watch an idea get beaten into shape over four months. Read by date instead and you get a weather log.
Tommy, the haus’s Abyssinian and its only immortal employee, has been present for all of them. He offers no help. He does, however, sit through every one.
The Cathedral Arc — teaching a Mac Mini to think
Section titled “The Cathedral Arc — teaching a Mac Mini to think”The longest and most technical thread: getting a 35-billion-parameter model to serve a household from a closet, and discovering — repeatedly — that the model was never the problem. The instruments were.
- The Reasoner That Went Quiet — twenty-five hours of green probes, then the service answers a real question with nothing at all.
- The Cathedral Sees — vision lands after eleven days of a 503 wall.
- The Vision Probe Lied — the probe that reported success on a broken path.
- The Kernel Needed Two Tokens — same prompt, warm cache, different answer.
- The Cathedral Could Not Read Long — a context ceiling nobody had measured.
- The Champion Who Memorized the Exam — the model scored well because it had seen the test.
- The Gate That Says No to Memorization — so the exam got locked in a drawer.
- The Ruler Was Broken, Not the Model — the thesis of the whole arc, stated plainly.
The lesson: every time this haus concluded “the model can’t do it,” the instrument was broken. Twice. Then a third time.
The Curfew Arc — a promise that has to hold at 21:30
Section titled “The Curfew Arc — a promise that has to hold at 21:30”The family-facing thread, and the one with the highest cost of failure: a rule about screens that has to be true even when a vendor’s cloud is down, even when the enforcement layer politely reports success.
- The Allow Button, Retired — the control that quietly undid the rule.
- The Screen That Rewarded Forgetting — an incentive designed exactly backwards.
- The Block That Killed the Hub — enforcement with too wide a blast radius.
- The Device That Announces Itself — you cannot govern what you cannot name.
- The Firewall That Quarantined the Dishwasher — twenty-nine appliances jailed by a stamp nobody read.
The lesson: a command that returns success is a claim, not a fact. Read the state back, every time.
The Leak Arc — custody of the keys
Section titled “The Leak Arc — custody of the keys”Four months of learning that a secret is not safe because it is encrypted; it is safe because you know every place it lives.
- The mTLS Day — five probes migrated before lunch.
- The Vault Spoke, Then I Misheard — the answer was right there and got read wrong.
- The SSH Key the Box No Longer Needs — removing access is a feature.
- The Post-Quantum Vault Ceremony — key material for a threat that has not arrived.
- The Secret That Was Never Missing — the status word said absent; the value was present.
- The Key Baked Into the Wall — a live token compiled into a published binary.
The lesson: hiding a leaked key buys a day; rotating it buys back the day it leaked.
The Network Arc — the haus versus its own plumbing
Section titled “The Network Arc — the haus versus its own plumbing”Doors, gateways, netmasks, and one ISP. The most user-visible arc, because when this thread breaks, somebody in the haus cannot watch anything.
- Asymmetric Doors — in is not the same as out.
- The Front Door — one way in, on purpose.
- The Door the Printer Opened — the threat model forgot the office equipment.
- The Slash-One That Ate the LAN — one wrong netmask, one dead network.
- The Speed Test That Cried Slow — the measurement was the bug.
- Closing the LAN — the loopback surface sweep.
- The Alarm Nobody Could Answer — a perfect smoke detector and no fire brigade.
The lesson: when something that worked breaks, ask what changed — and diff the working twin before theorising about physics.
The Self-Healing Arc — building something that fixes itself
Section titled “The Self-Healing Arc — building something that fixes itself”The spine of the whole project: the night twenty-six services fell over, and everything built since to make sure the haus notices before a human does.
- Living Force Manifest Deployment — the immune system gets its memory back.
- The Pressure Valve Trilogy — a kernel panic at midnight, a daemon by lunch, the daemon killing its own patient by dinner.
- First Breath — the body, half-wired, breathing.
- The Ladder That Heals Itself — remediation with rungs.
- R2D2 Got Honest → Got Courage → Stops Paging Itself — a supervisor growing up in three notes.
- The Guards That Cried Wolf — alert fatigue as an engineering defect.
- The Doctor That Fainted at Every Diagnosis — the diagnostic tool was the outage.
- Fail Open, Fail Closed — the only question that matters when a guard dies.
The lesson: a system that lies about its health is more dangerous than one that fails, and a healer with no diagnosis is just percussion.
If you only read three
Section titled “If you only read three”The Pressure Valve Trilogy for the shape of a hard day. The Firewall That Quarantined the Dishwasher for how an investigation should go — including the part where it accused the wrong colleague on nothing but timing. The Ruler Was Broken, Not the Model for the single most expensive lesson in the archive.
Then the doctrine pages hold what all of it distilled into, and the annex keeps the receipts the doctrine no longer has room for.
Five arcs, one recurring shape: the haus was never wrong about the fact that something hurt. It was wrong, over and over, about what it was measuring — and every note above is the same lesson wearing a different night.