Oleksandr KhomenkoEssays on software engineering, AI-enabled development, product architecture, systems thinking, and endurance running.https://olekk.com/2026-05-13T00:00:00ZRemote dev boxes need secret brokers, not copied env fileshttps://olekk.com/posts/remote-dev-boxes-need-secret-brokers.html2026-05-13T00:00:00Z2026-05-13T00:00:00ZThe rule I use for remote development secrets: keep the vault on the laptop and hand the remote only scoped runtime leases.Travel is not resthttps://olekk.com/posts/travel-is-not-rest.html2026-05-12T00:00:00Z2026-05-12T00:00:00ZWhat my wife and I learned when a beautiful two-week trip became too much logistics, movement, and stimulation to feel like recovery.Git worktrees expose the real cost structure of JavaScript repositorieshttps://olekk.com/posts/git-worktrees-node-modules.html2026-05-09T00:00:00Z2026-05-09T00:00:00ZThe rule I use with worktrees: isolate working directories, share immutable caches, and keep each branch honest.Agent APIs need an intent layerhttps://olekk.com/posts/agents-apis-and-product-signal.html2026-04-12T00:00:00Z2026-04-12T00:00:00ZThe rule I use for agent-facing APIs: log the user goal before the agent turns it into a clean tool call.Agents do not want your CRUD APIshttps://olekk.com/posts/agents-do-not-want-your-crud-apis.html2026-03-18T00:00:00Z2026-03-18T00:00:00ZThe agent-ready test I use for SaaS APIs: expose useful product capabilities, not remote access to internal objects.AI coding agents need identity boundarieshttps://olekk.com/posts/separate-unix-users-agentic-development.html2026-02-12T00:00:00Z2026-02-12T00:00:00ZThe rule I use for local AI agents: split Unix accounts when credentials, identity, cloud access, or risk level differ.Frictionless remote access to a home Linux workstationhttps://olekk.com/posts/frictionless-remote-access-home-linux-workstation.html2025-12-22T00:00:00Z2025-12-22T00:00:00ZThe setup I want for a home Linux workstation: private access that makes SSH feel cheap without exposing a public port.Architecture is the cost structure of changehttps://olekk.com/posts/architecture-is-the-cost-structure-of-change.html2025-11-18T00:00:00Z2025-11-18T00:00:00ZThe way I judge architecture: does it make the next valuable change cheaper to understand, test, review, and recover from?AI made code cheap. It did not make merge decisions cheaphttps://olekk.com/posts/ai-made-code-cheap.html2025-11-06T00:00:00Z2025-11-06T00:00:00ZThe rule I use for AI-heavy development: make generation cheap, but make new obligations intentional.My first 100K at Canyonshttps://olekk.com/posts/first-100k-canyons-endurance-runs.html2025-04-26T00:00:00Z2025-04-26T00:00:00ZI thought the early miles were free. The mountain collected interest: blown quads, slower movement, and patience as a racing strategy.Encryption keys are product boundarieshttps://olekk.com/posts/encryption-keys-are-product-boundaries.html2024-11-12T00:00:00Z2024-11-12T00:00:00ZHow I think about key design in multi-tenant SaaS: customer keys should model authority, jurisdiction, deletion, and enterprise trust.Growth engineering is the business of reducing the cost of learninghttps://olekk.com/posts/growth-engineering-cost-of-learning.html2024-10-17T00:00:00Z2024-10-17T00:00:00ZThe way I judge growth engineering: does the work make the next product question cheaper, safer, and easier to trust?