Posts tagged: clojure
Parsing AI Agent Output Into an Immutable AST Before It Touches Production
AI coding agents ship subtle runtime flaws — unescaped innerHTML, unstable sorts, malformed config. A parse-first EDN gate catches them before runtime, deterministically.
The Flight Recorder Sealed Its Own Coffin
My AI agent wrote the test suite for my tamper-evident flight recorder — caught two bugs I shipped, then exposed a paradox where the recorder invalidated its own seal by logging it.
My Flight Recorder Crashed Before The Plane Did: Four Bugs From One Dogfood Session
I shipped a flight recorder for AI agent runs yesterday and preached immutable DAGs on this blog. Today my job bot attached it for its first real flight — and the recorder itself crashed four times. Every crash taught something a unit test would have missed.
Your Agent Framework Dumps JSON Blobs. Here Are the Three Storage Layers It Should Have.
Traditional agent frameworks serialize giant state dictionaries on every step. An immutable DAG engine splits storage into three layers — HAMT pointers in RAM, content-addressed blobs on disk, and a replay proxy store — and last night I built layer two for real.
Why I Replaced 200 Lines of Babashka with 35 Lines of Rego
How declarative IAM validation using OPA/Rego replaced imperative Clojure security checks — and why functional programmers already understand policy engines.
Your Idea Already Exists — It's Called "Logic Programming for Security"
Why functional programmers are naturally drawn to security policy engines — and how declarative policy ideas are used in modern infrastructure.
The Missing Link: Why Clojure Developers Should Care About Policy Engines
How functional programming meets infrastructure security — and how Clojure skills can transfer to policy-as-code work.
When My Own Scanner Blocked My Own Commit
My pre-commit scanner caught my real NRIC and phone number before they hit GitLab — twice in one session.
TasteLocal: A Practical VAPT Checklist for Clojure and HTMX
A practical vulnerability assessment checklist for TasteLocal, a Clojure and HTMX culinary platform with role-based access, bookings, and SQLite/PostgreSQL support.
Full-Blog PDPA Audit — Scanning 202 Posts for PII Leaks
I ran pdpa-sg-clj across all 202 blog posts — 239K words, 1.66 MB — to audit for NRIC leaks, phone numbers, API keys, and email exposure. Here's the methodology, findings, and what I learned about automated PII detection at scale.
Building pdpa-sg-clj — A Clojure/Babashka Scanner Library With NRIC Mod-11 and ripgrep NDJSON
Deep-dive into the architecture of pdpa-sg-clj — how it uses Babashka, ripgrep NDJSON, and the Singapore NRIC Mod-11 checksum algorithm to build a fast, correct PII scanner library.
I Made My Blog Discoverable by AI Agents — llms.txt, Content-Type, and the Agent Discovery Flow
How I implemented the llmstxt.org standard on nurazhar.com — dynamic llms.txt generation, proper Content-Type headers, and an agent discovery flow that lets AI agents navigate 191 articles without scraping.
How I Made My Blog PDPA SG Compliant — Step by Step Integration Journal
A step-by-step builder's journal of integrating pdpa-sg-clj into a static blog publishing pipeline — submodule setup, wrapper scripting, pipeline wiring, testing, and the decisions behind each step.
My Blog Now Scans Itself for PII Before Every Publish — Here's the Pipeline
How I integrated pdpa-sg-clj — a Singapore PDPA compliance toolkit — into my blog publishing workflow, so every post is scanned for NRIC numbers, phone numbers, API keys, and credentials before it goes live.
Six Security Automation Tools in Babashka: A Zero-Dependency Monorepo
How I built six security automation assistants as a babashka monorepo with pure functions, a self-contained CSV parser, and 175 assertions of golden tests — zero external dependencies, zero linter warnings, zero bugs.
I Made Two Repos Public and Then Panic-Scanned Them for Personal Data Leaks
Before flipping my capstone project repos from private to public, I ran a full PDPA compliance audit using a Singapore-specific PII scanner.
Mathematical Determinism: Overcoming the Lisp Parenthesis Odyssey in Production
When a standard container build compiles successfully but triggers a production HTTP 503 Upstream Connection Failure, trial-and-error debugging fails. Here is how we isolated temporal telemetry and used string-aware static analysis to achieve absolute AST balance.
Why Isn't My Static Site Build Instant? An Architectural Deep Dive
Ever wondered why static site generation takes seconds or minutes instead of milliseconds? It's easy to blame Clojure or Babashka, but the true bottleneck is often the operating system's process boundary. Let's explore subprocess overhead, compiled vs. interpreted languages, and how to achieve sub-millisecond builds.
Gotong Royong — Nusantara Resource Allocation Engine, Refactored
The Gotong Royong Local Resource Abstraction Engine has been refactored to embed Nusantara cultural constraints — anti-hoarding velocity mechanics, Small-World/Mandala network topology, and indigenous linguistic layers (Sambatan, Mapalus, Ngayah). This post documents the architectural decisions.
REPL vs nREPL — Why Clojure's Live Programming Is a Superpower
Deep technical dive into the REPL and nREPL — how they work at the protocol level, why Clojure's architecture enables live programming, and how every other language ecosystem falls short. With D-two diagrams.
Applying Agile and Scrum to a Solo Open-Source MAS Project — A Mentor's Guide
A mentor's walkthrough on how to apply the Agile and Scrum principles from the PDWD-APM-0226 bootcamp to the headhunter-agent multi-agent system project, with D-two architecture diagrams.
Building an AI Butler: A Post-Mortem From Inside the Architecture
I shipped a Hermes-class personal AI butler in Clojure/Babashka. Five risks hit me while building. Three had architectural fixes. Two did not. Vector at the end.
Scrum for a Solo Open-Source Project — Building Butler
Applying the 2020 Scrum Guide to a solo open-source Clojure project. Roles, events, artifacts, and the Product Backlog for the Butler — from someone learning this in class and building it in real time.
The Entropy Collapse Thesis — Why One Tool, Why Clojure, Why LLMs as Compiler
One engineer's argument for minimizing cognitive entropy by collapsing the toolchain into the smallest possible surface area — Clojure/Babashka as the substrate, LLMs as the compiler, and why inheritance is a design violation.
pdpa-sg-clj: Compliance-as-Code for Singapore's PDPA, Readable by AI Agents
A new public Clojure + Babashka toolkit that turns the 11 Singapore PDPA obligations into a self-ticking checklist, a Mod-11 NRIC redactor, and a ripgrep-backed scanner an AI agent can read end-to-end.
The Paperclip Engine: A Deterministic Business Kernel in Clojure
The previous posts covered the BSV coordination layer (the glue between agents and Bitcoin primitives) and its architecture.
Debugging a Missing Blog Post — Quickblog Cache & YAML Frontmatter
How a missing blog post revealed a silent cache bug and a YAML format incompatibility that crashes quickblog's tag generation.
One Language. One Ledger. How Clojure + BSV Is All You Need for Sovereign AI Agents
Every multi-agent architecture I've seen has the same problem: **too many moving parts held together by trust you can't verify**.
How a Single ".env" in allowed-extensions Could Leak Your Secrets to LLMs
A three-layer defense-in-depth fix for an AI context bundler that was accidentally including .env files in LLM context.
Leaky Layout Abstractions: Fixing Template Scope Leaks in Static Site Compilers
A technical post-mortem on how custom standalone layouts leak unparsed compiler directives to the client, and how to resolve it at the pipeline layer without dependency bloat.
Designing a Zero-Configuration, Zero-Admin Developer Sandbox for Career-Switchers
How to build a zero-configuration, zero-administrator local development environment running Django and React on Windows 11 to help adult tech-learners bypass environment installation friction.
Decoupled Static Dashboards: Building Transparent roadmaps in Public
How to build and serve interactive, public project roadmaps natively to readers at zero compute cost using static compiler pipelines.
Taming LLM Repetition Loops & Building aur-audit for the AUR Security Incident
A security engineering guide on why smaller LLMs get caught in repetition loops during agentic workflows, how to mitigate it, and the release of aur-audit—a Clojure (Babashka) static analyzer responding to the active June 2026 AUR security incident.
Quickblog: The Zen of Minimalist Static Site Generation
An architectural breakdown of Quickblog, the minimalist static site generator powered by Babashka, and why zero-database static HTML is the ultimate design choice.
Quickblog Gotcha: Why Your Post Titles Are Displaying Twice
A quick troubleshooting guide on how Quickblog handles title metadata rendering, and how to programmatically resolve double H1 headers.
How to Maximize Clojure Usage & Minimize Token Quota on Antigravity IDE
A guide on managing token quotas and optimizing LLM usage for Clojure development in Antigravity.
The Browser is Fragile: Why I Nuked My Web GUI for Native Clojure Desktop
I tried building headhunter-agent as a web app. It broke. In minutes, I nuked the browser code and rewrote it as a native cljfx desktop app. Here is why.
Hello Clojure!
Welcome to my Clojure automation journal, hosted natively using Babashka and Quickblog.