caller-identity
Interactive, wire-level walkthrough of how AWS credentials are issued, signed, verified and authorized. Every SigV4 signature is computed in your browser.
0-draft
Raw outputs, researches, and unpolished tools. Everything here is v0.
Drag the desk to look around and pinch to zoom. Break a seal and the project opens right here.12 files on the desk right now, in 4 piles.
Membership is open. The password is.
AWS, drawn
Interactive maps of how AWS actually works, from credentials to cables. English and Japanese.
assume-role
AWS STS, drawn: every endpoint, every API, every way a workload or a human ends up holding temporary credentials. Interactive, bilingual (EN/JA).
on-ramp
Every way from a corporate network into AWS, drawn as a road map: VPN, Direct Connect, SD-WAN, Transit Gateway, Cloud WAN, PrivateLink, hybrid DNS, user access. EN/JA.
cross-connect
AWS Direct Connect, drawn: an interactive, bilingual (EN/JA) explainer of connections, VIFs, DX gateway, BGP, resiliency, MACsec and pricing.
s3-atlas
Everything about Amazon S3 — deep research docs, command cookbook, competitor and market analysis, and an interactive visual atlas (EN/JA).
Identity & security
Policy engines side by side, standards worth watching, and one zero-day taken apart.
authz-playground
Give Cedar, OPA/Rego, Casbin and ReBAC the same authorization rules, then watch where their answers diverge. Runs entirely in the browser.
identity-deep-dive
Collect, score, and surface deep-dive candidates across OAuth WG, WIMSE, and OpenID Foundation specs
php2shell-anatomy
Defensive awareness site dissecting the php2shell PHP zero-day (CVE-2026-109618 / CVE-2026-109619): why it's critical, who's affected, and how to patch in time.
Played in the README
Open an issue to make a move. GitHub Actions deals the cards and redraws the board.
The dealer shows seven, and you have 10.
Beat the dealer without going over 21. A click opens a prefilled issue: submit it and the table moves in about 30 seconds.
Shoe 1 · 4.8 decks left · out of it: 6 7 Q 7 8 7 8 2 2 Q T T 5 K K 7 9 3 3 J 9 3 7 7 · all 62
-3u over 11 hands · 1 player · 0u lost to mistakes
| Hand | Player | Dealer | Column 4 |
|---|---|---|---|
| 11 @kanywst | 22 bust (9 3 J) | 12 (3 9) | -25u |
| 10 @kanywst | 20 (T K) | 22 bust (5 K 7) | +25u |
| 9 @kanywst | 21 (7 2 2 Q) | 18 (8 T) | +25u |
6 decks · dealer stands on soft 17 · double after split · late surrender · blackjack pays 3 to 2 · shuffled at the 75% cut card
Click a piece, then a square. Takes about 30 seconds. · Resign
Last move: R-5h · Black 0 · White 0 · 0 games · 1 player
Writing
Where the deep dives end up as articles.
dev.to/kanywstLatest 8 articles
- Mandatum: Making an AI Agent's Authority a Chain You Can Verify4 minSep 16, 2026
- I Made Four Authorization Engines Answer the Same Questions2 minSep 12, 2026
- Envoy AI Gateway: A Hands-On Tour You Can Run Before Touching Kubernetes28 minAug 14, 2026
- Let's Play Shogi: I Turned My GitHub Profile README Into a Playable Board5 minAug 13, 2026
- Mapping MCP, A2A, and ACP: Telling AI Agent Protocols Apart in 202612 minJun 28, 2026
- The Day client_id Becomes a URL: Client ID Metadata Documents vs Dynamic Client Registration (DCR)15 minJun 26, 2026
- AgentAuth Deep Dive: Reading the Self-Authenticating UUID for AI Agents from the Source14 minJun 25, 2026
- JWT (Access Token) vs X.509 Deep Dive: How to Choose What You Present as a Credential10 minJun 15, 2026
Total reading90 min
Thanks for reading. Come back for v1.