4 posts on CipherStack.
Before the Postgres vault and the HMAC certs, there was a Python library that read .env, sorted providers by free-tier priority, and rotated on 429.
How I built Carbonwise, a Next.js carbon agent where an SVG garden reacts to your daily budget. Five questions, Gemini via CipherStack, one honest bundle-audit gap.
Why I stopped hardcoding API keys in .env files and built CipherStack. The four-state machine behind LRU vending, and the PostgreSQL lock that saved it under concurrency.
The LRU state machine is one component. This is the whole vault, Postgres AEAD rows, the Fly.io API, cert handshake, dashboard, and the /metrics endpoint.
