Blog
Essays on building judgment-heavy systems.
How I Put Permission Boundaries Around Cross-Server Commands and File Serving
Cross-server commands without root keys, private files without chmod 777. Two config files did it. This is the story of how a Tacavar infrastructure problem be…
My Observability Stack Looked Perfect. It Was Showing Nothing.
The dashboards looked gorgeous. All 59 traces in the last hour were the same cron heartbeat. I had just stood up a Tempo + Grafana + OpenTelemetry stack for Ta…
AI Crypto Trading Bots Comparison 2026: The August Reset in Pricing and 'AI' Claims
AI Crypto Trading Bots Comparison 2026: The August Reset in Pricing and "AI" Claims What changed in the AI crypto trading bots comparison since spring 2026? Th…
The Best Free Crypto Macro Signal Is the Fed's Own Data
Net liquidity from FRED leads crypto by weeks. It's free and 10 lines of Python. The same signal that macro desks package into $500-a-month subscriptions is si…
How I Proved Mid-Tier LLMs Are Dangerous for Unfamiliar Tasks
qwen invented APIs and ignored delegation instructions. Prompt fixes didn't work. Routing did. I found this while building a Tacavar agent eval for PiAPI Seeda…
A 12-File Infrastructure Refactor for $0.01 with Three AI Models
Opus planned, Haiku audited, Codex executed. Total cost: one cent. That's the full ledger for a 12-file infrastructure refactor Tacavar ran through its own age…
“Docker Image” Error Was an LLM API Mismatch
The error said 'failed to get Docker image.' The fix was deleting one LLM API parameter. When the Error Message Points the Wrong Way We've all been there: an a…
Why One Monitoring Threshold Fails Both arxiv and Reddit
A healthy day for arxiv looks like a dead day for Reddit. If you're running a single monitoring threshold across every data source in your pipeline, that sente…
The Quiet Signal That Predicts a Dying Data Feed
Recurring overlap in your research feed means the source is about to go dark. The signal arrives before the 404s, before the empty payloads. It shows up as the…
We Made Our Agents Dumber and Output Quality Doubled
The smartest AI in your stack might be your biggest liability. We made our coding agents dumber on purpose, and output quality doubled. Not in a demo. In produ…
My Grafana Dashboard Was Beautiful and Completely Useless
I had a beautiful Grafana stack. 59 of 59 traces were the same heartbeat cron. Zero actual work. That sentence should have been the first thing I saw when I op…
I Replaced a $200 Upscaler With a Free CUDA Script
A $200 GUI upscaler replaced by 40 lines of Python. One ffmpeg flag nearly broke everything. That isn't a headline, it's the audit report for Tacavar's video p…
Three AI Image Tiers: $0.0015 Drafts, $0.02 Heroes, Zero Waste
Three image models, one rule: $0.0015 drafts, $0.02 heroes. Same API, 13x difference. Most teams treat image generation as a single tool. They pick one model,…
This Week at Tacavar — 2026-W33
The week of 2026-W33 at Tacavar had no breakthroughs, no videos, and no uploads. That is not a complaint. It is the point. While the fleet ran quietly, it also…
How I Proved Mid-Tier LLMs Are Dangerous for Unfamiliar Tasks
qwen invented APIs and ignored delegation instructions. Prompt fixes didn't work. Routing did. This is a post-mortem of a week I spent trying to make a mid-tie…
A 12-File Infrastructure Refactor for $0.01 with Three AI Models
Opus planned, Haiku audited, Codex executed. Total cost: one cent. That sentence is not a flex. It's the clearest argument I've seen for why Tacavar's agent ro…
Why One Monitoring Threshold Fails Both arxiv and Reddit
A healthy day for arxiv looks like a dead day for Reddit. That single sentence broke our internal dashboard. For months, Tacavar’s monitoring had one idea of “…
The Quiet Signal That Predicts a Dying Data Feed
Recurring overlap in your research feed means the source is about to go dark. At Tacavar, we've learned to hear a data source dying before it stops breathing.…
We Made Our Agents Dumber and Output Quality Doubled
The smartest AI in your stack might be your biggest liability. When we first gave Tacavar's coding agents unrestricted context, every tool in the box, and the…
My Grafana Dashboard Was Beautiful and Completely Useless
I had a beautiful Grafana stack. 59 of 59 traces were the same heartbeat cron. Zero actual work. If you're a founder or operator, you know the ritual: stand up…
This Week at Tacavar — 2026-W32
The week opened with a quiet contradiction: a source that had been downgraded to "fallback" status produced the highest-scoring signal of the day. ArXiv was fl…
What Are Crypto Prediction Market Bots? (And Why 3Commas Is Building One)
What Are Crypto Prediction Market Bots? (And Why 3Commas Is Building One) Prediction markets are contracts on real-world outcomes. Crypto prediction market bot…
My Grafana Dashboard Looked Perfect — But Showed Zero Real Data
My observability dashboard looked perfect. Then I probed it: 59/59 traces were a 250ms heartbeat. I had stood up a Tempo + Grafana + OpenTelemetry stack for Ta…
Serve Private Files via Caddy Without Opening Permissions — A 4-Line Bind Mount Trick
I needed Caddy to serve private files without world-readable permissions. The fix: a 4-line fstab entry. If you've ever tried to get a web server to serve file…
Why Your AI Agent Forgets Everything — And Why That's a Feature, Not a Bug
Everyone is building RAG for agent memory; we deleted it and got better results. At Tacavar, we spent months watching teams bolt vector databases, summarizatio…
Run Commands on Another Server Without Sharing SSH Keys
One server runs commands on another. No shared SSH keys. Just a whitelist gate and an audit log. That's not a thought experiment. It's the exact problem Tacava…
We Made Our AI Agents Dumber — Output Quality Doubled
What if the smartest AI in your stack is actually your biggest liability? That question became impossible to ignore inside Tacavar after Josh Fathi deliberatel…
3Commas Had a Security Incident. Here's How to Evaluate Trading Bot Security.
3Commas Had a Security Incident. Here's How to Evaluate Trading Bot Security. The 3commas.io homepage currently displays a security investigation notice. The p…
The Dental AI Buyer's Guide: How to Choose Between Pearl, Overjet, and VideaHealth
Dental AI has moved from pilot to procurement. DSOs and group practices are no longer asking whether to adopt — they are asking which platform to standardize a…
This Week at Tacavar — 2026-W31
The week opened with a quiet Sunday failure. At 15:02 on July 26, the weekly-blog-briefs cron tried to generate new article briefs, called dscomplete.py for a…
This Week at Tacavar — W30
Sometimes the most honest week is the one where nothing headline-worthy happens, yet the machine still ships. ISO week 2026-W30 was that kind of week at Tacava…
My Grafana Dashboard Looked Perfect — But Showed Zero Real Data
My observability dashboard looked perfect. Then I probed it: 59/59 traces were a 250ms heartbeat. I had stood up a Tempo + Grafana + OpenTelemetry stack with t…
The Quiet Signal That Kills Your Data Feed Before It Dies
How we learned to hear a data source dying before it stopped breathing. The Problem with Traditional Monitoring Most data pipeline monitoring is reactive. You…
Serve Private Files via Caddy Without Opening Permissions — A 4-Line Bind Mount Trick
I needed Caddy to serve private files without world-readable permissions. The fix: a 4-line fstab entry. The Challenge: Caddy Can't Read chmod 750 Directories…
Why Your AI Agent Forgets Everything — And Why That's a Feature, Not a Bug
Everyone is building RAG for agent memory; we deleted it and got better results. When we at Tacavar started digging into why AI agents forget context across se…
We Made Our AI Agents Dumber — Output Quality Doubled
What if the smartest AI in your stack is actually your biggest liability? At Tacavar, we discovered that the most capable models in our coding agents were prod…
This Week at Tacavar — W29
The morning of July 12, the daily signal report looked fine on paper. Every source was green. Uptime was clean. Item counts were within range. But the stories…
The Quiet Signal That Kills Your Data Feed Before It Dies
How we learned to hear a data source dying before it stopped breathing. The Problem with Traditional Monitoring Most data pipeline monitoring is reactive by de…
Why Your AI Agent Forgets Everything — And Why That's a Feature, Not a Bug
Everyone is building RAG for agent memory; we deleted it and got better results. The Memory Problem Every AI agent eventually faces the same wall: it forgets.…
The Discipline of Zero
On Monday morning, the weekly blog-brief generator ran once, produced zero posts, and exited with code 1. Every idea it found was a duplicate of something alre…
The Signal That Says Nothing
What if your broken pipeline is actually telling you something your working pipeline can't? This week at Tacavar, the most useful output from our research stac…
A 4-Line Trick to Serve Files From a Private Home Directory via Caddy
I needed Caddy to serve files from my home directory without making my home directory world-readable. The answer was a 4-line fstab entry. The Problem: Caddy C…
The Week That Broke on a 402
On Tuesday afternoon, the self-heal cron completed its 17th silent run of the week. By Friday evening, it would log 28 runs without a single alert. The system…
Beautiful Dashboards, Zero Signal: The Observability Trap Most Teams Miss
A polished Grafana board can hide the fact that nothing real is being measured. The dashboards rendered perfectly—tight latency heatmaps, populated bar charts,…
My Grafana Dashboard Looked Beautiful and Had Exactly One Operation in It
59 of 59 traces were the same 250ms heartbeat. The cron polling its own queue. When we deployed our new observability stack at Tacavar, I pulled up the three d…
We Nerfed Our AI Agents on Purpose — Output Quality Doubled
We gave our agents fewer tools and worse models. Output quality doubled. That’s not a thought experiment — it’s the data from two months of drilling into Tacav…
How I Run Two Servers That Talk to Each Other Without Shared SSH Keys
I run two servers that talk to each other without sharing SSH keys. Here's how. It's not about being paranoid—it's about being practical when you're a solo ope…
Why LLM Routing Fails When Mid-Tier Models Pretend They Understand the Task
The real agent bug wasn't prompting. It was letting the wrong model decide. When you run an autonomous agent in production, every decision feels like a leap of…
Least-Privilege Cross-Server Command Dispatch Without Sharing Root SSH Keys
Cross-server automation gets safer when you whitelist command names instead of shells. At Tacavar, we ran into this when our Bailian droplet—a lightweight agen…
The Three Lies Your Monitoring Dashboard Is Telling You Right Now
My dashboard said 'healthy' while my agents had been dead for six hours. That single sentence captures the three fundamental lies your monitoring dashboard is…
Twenty-Eight Silent Heartbeats
Twenty-Eight Silent Heartbeats The agent-self-heal cron ran twenty-eight times this week, every time returning the same verdict: [SILENT]. No panics, no degrad…
When an engineer intentionally breaks what works, most teams brace for the firefight.
When an engineer intentionally breaks what works, most teams brace for the firefight. Last week Josh Fathi did exactly that, publishing the results under a Hac…
The Most Telling Pattern from W23 Isn't What Shipped — It's What Accumulated
The most telling pattern from W23 is not what shipped. It is what accumulated. The pipeline produced zero blog posts, zero video briefs, and zero YouTube uploa…
AI Video Pipeline: How We Cut Costs From $0.52 to $0.08 Per Clip
AI Video Pipeline: How We Cut Costs From $0.52 to $0.08 Per Clip TL;DR: Tacavar's video pipeline generates production-ready short-form clips at $0.08 each by r…
The week’s most useful failure didn’t happen in a dashboard.
The week’s most useful failure didn’t happen in a dashboard. It happened the morning after a clean bill of health. Twenty-four cron jobs had already been audit…
Beautiful Dashboards, Empty Truth: The Observability Trap That Ships Blind Systems
A perfect dashboard can hide a completely non-working system. Founder/operators at Tacavar.com do not have the luxury of mistaking presentation for proof. Josh…
Two Free Macro Signals We’d Track Before Paying for Another Trading Dashboard
Some of the best crypto signals on earth are still free. That is not a contrarian slogan. It is a practical operating principle Tacavar uses when deciding what…
How Tacavar Built Cross-Server Command Dispatch Without Sharing Root SSH Keys
Shared SSH keys are easy. Least-privilege automation is better. That tradeoff sits at the center of how Tacavar approaches autonomous infrastructure. When one…