Posts on Static Site.

I patched the same privacy leak four times. The lesson isn't to be more careful.

Private repo names in a language stats page. A macOS username in a published plist example. A missing privacy policy when the newsletter went live. Four separate fixes, each reactive, each after deployment. Four is enough to name the pattern: the publish boundary has no scrubber.