bordumb — writingNotes on identity, bounded authority, verification, formal methods, and human trust.https://bordumb.dev/A proof should break when the program changeshttps://bordumb.dev/blog/a-proof-should-break-when-the-program-changes/https://bordumb.dev/blog/a-proof-should-break-when-the-program-changes/How Auths Proof translates its production Rust authority kernel through Charon and Aeneas, refines it against a readable Lean specification, and makes semantic drift fail CI.Thu, 30 Jul 2026 00:00:00 GMTWhy I built Authshttps://bordumb.dev/blog/why-i-built-auths/https://bordumb.dev/blog/why-i-built-auths/I built Auths to separate identity from authority and make exact, bounded authorization portable across systems that will inevitably change.Thu, 30 Jul 2026 00:00:00 GMTWhat Japanese taught me about what people leave unsaidhttps://bordumb.dev/blog/what-japanese-taught-me-about-what-people-leave-unsaid/https://bordumb.dev/blog/what-japanese-taught-me-about-what-people-leave-unsaid/Japanese taught me that understanding depends not only on what a sentence contains, but on what two people can safely omit.Wed, 29 Jul 2026 14:28:00 GMTI learned Japanese by starting with kanjihttps://bordumb.dev/blog/i-learned-japanese-by-starting-with-kanji/https://bordumb.dev/blog/i-learned-japanese-by-starting-with-kanji/Seventeen years of Japanese began with a year of kanji, followed by grammar dictionaries, half-understood podcasts, and comedy with captions.Wed, 29 Jul 2026 13:55:00 GMTA dependency update can change what your program is allowed to dohttps://bordumb.dev/blog/a-dependency-update-can-change-what-your-program-is-allowed-to-do/https://bordumb.dev/blog/a-dependency-update-can-change-what-your-program-is-allowed-to-do/A capsec diff of two published Rust crate versions shows why dependency review should include newly reachable filesystem, network, process, and FFI behavior.Wed, 29 Jul 2026 00:00:00 GMTA function signature should say what the function can dohttps://bordumb.dev/blog/a-function-signature-should-say-what-the-function-can-do/https://bordumb.dev/blog/a-function-signature-should-say-what-the-function-can-do/How capsec makes filesystem and network authority visible in Rust types, what the compiler rejects, and where audit must take over.Wed, 29 Jul 2026 00:00:00 GMTA probe that has never failed proves nothinghttps://bordumb.dev/blog/a-probe-that-has-never-failed/https://bordumb.dev/blog/a-probe-that-has-never-failed/Why executable claims need retained counterexamples, distinct failure states, and a gate that distrusts the confidence of its operator.Wed, 29 Jul 2026 00:00:00 GMTAuthority should only get smallerhttps://bordumb.dev/blog/authority-should-only-get-smaller/https://bordumb.dev/blog/authority-should-only-get-smaller/Why auths-proof separates identity evidence, delegated authority, and application execution behind one offline verification contract.Mon, 27 Jul 2026 00:00:00 GMTThe repository rejects reverse dependencieshttps://bordumb.dev/blog/the-repository-rejects-reverse-dependencies/https://bordumb.dev/blog/the-repository-rejects-reverse-dependencies/How auths-proof turns layer direction, offline verification, deterministic CBOR, and protocol bounds into executable repository checks.Sun, 26 Jul 2026 00:00:00 GMTOne authority model, many identity and transport systemshttps://bordumb.dev/blog/one-authority-model-many-systems/https://bordumb.dev/blog/one-authority-model-many-systems/How auths-proof admits KERI, raw keys, P-256, Iroh, HTTPS, and other systems without letting them redefine permission.Sat, 25 Jul 2026 00:00:00 GMTA machine-checked map is not a solutionhttps://bordumb.dev/blog/a-map-is-not-a-solution/https://bordumb.dev/blog/a-map-is-not-a-solution/What an honest formal map contributes to an open mathematical problem—and why preserving the red nodes is part of the result.Fri, 24 Jul 2026 00:00:00 GMT