# Grimoire

> A grimoire is a book of spells and invocations. This one accretes lore on whatever subjects have demanded inscription. Conjure a page to receive it. All transmissions arrive as plain text.

- [Seek](/seek?q=): full-text search across scrolls

## Fresh Ink

### 2026-05-02

- Fixed `_expand_refs` to skip code regions; backtick'd `@reference` now renders literally instead of as a broken link.
- Added [_vulnerability-programs](/_vulnerability-programs) under [cybersecurity](/cybersecurity) — cross-lab map of AI vulnerability programmes; absorbs the tombstoned `@_glasswing` material.
- Tombstoned `@_glasswing` into [_vulnerability-programs](/_vulnerability-programs); URL still resolves, internal references repointed.
- Updated [_vulnerability-research](/_vulnerability-research) — added the GPT-5.5 `rust_vm` worked example and a Big Sleep / CodeMender paragraph.
- Updated [_script-kiddies](/_script-kiddies) — added CodeMender as patchpocalypse counter-evidence.
- CLAUDE.md: added `Tombstoning` directive — replace dissolved-scroll body with an outward pointer rather than deleting.
- Expanded [_supply-chain-security](/_supply-chain-security) — Cal Paterson's free-rider critique of dependency cooldowns and the upload-queue alternative.

### 2026-05-01

- Added [_cryptographic-right-answers](/_cryptographic-right-answers) under [cybersecurity](/cybersecurity) — tracked diff across the Percival 2009 / tqbf 2015 / Latacora 2018 / Latacora 2024 PQ posts, with Python recipes against `cryptography` and PyNaCl for each primitive.
- Expanded [_http-caching](/_http-caching) to cover `Cache-Control` directives, content-hash ETags vs mtime under containerized deploys, and a Falcon ASGI middleware for static routes. Distilled from a 2026-04-21 field report against Falcon 4.2.0 on Fly.io.
- Dissolved `_cyber-proof-of-work`. The Breunig vs. Antirez debate (with AISI's *Last Ones* evaluation and the OpenBSD SACK case) moved into [_glasswing](/_glasswing) as "The April 2026 Debate"; the development → review → hardening pipeline and the equity caveat moved to [_security-program](/_security-program); the source-exfiltration asymmetry moved to [_vulnerability-research](/_vulnerability-research).

## Scrolls

- [adaptive-learning](/adaptive-learning): Adaptive Learning — Personalizing Instruction Through Algorithms and Graphs
- [agents](/agents): Agents — Systems That Decide Their Own Next Step
- [autoresearch](/autoresearch): Autoresearch — Autonomous AI Agents as Overnight Researchers
- [changelog](/changelog): Changelog
- [cybersecurity](/cybersecurity): Cybersecurity — Attack Surfaces, Defenses, and the Shifting Economics
- [deep-practice](/deep-practice): Deep Practice — What Cognitive Science Knows About Durable Learning
- [defensive-magic](/defensive-magic): Defensive Magic — Design Constraints That Prevent Defects From Existing
- [embedded-postgres](/embedded-postgres): Embedded PostgreSQL — Running Postgres Without a Server
- [fly-io](/fly-io): Fly.io — When a Service Outgrows Its Sprite
- [grimoire](/grimoire): Grimoire — A Knowledge Base of Spells, Scrolls, and Lore
- [legal](/legal): Legal — Compliance Patterns for Services That Handle Other People's Data
- [lexicon](/lexicon): Lexicon
- [llms](/llms): Language Models — Patterns, Tools, and the Emerging Infrastructure
- [progressive-disclosure](/progressive-disclosure): Progressive Disclosure — Showing the Right Thing at the Right Time
- [references](/references): References — Oracles, Archives, and Further Reading
- [resilience](/resilience): Resilience — How Complex Systems Fail
- [science](/science): Science — How to Learn on Purpose
- [seasons](/seasons): Seasons — Three Calendars for the Same Sun
- [serving](/serving): Serving Python Web Applications
- [skill-tree](/skill-tree): Skill Tree — Encoding Curricula as Prerequisite Graphs
- [spaced-repetition](/spaced-repetition): Spaced Repetition — Algorithms for Scheduling Memory
- [sprites](/sprites): Sprites — The Container Platform Under Everything
- [sqlite](/sqlite): SQLite — Patterns for Small Services
- [tight-loops](/tight-loops): Tight Loops — Shifting Left on Defects Through Fast Feedback