DEKIMU BLOG

Straight talk
for freelancers and SMBs.

Guides for running your business. Notes from building Dekimu in public.

Everything — freelance and SMB playbook plus what we're building.

NotesTRUSTAIAug 31, 20265 min read

The anchored-receipt family is twenty-two members wide

Twenty-two receipt families, twenty of them shipped, thirty-three claim types. Each one is a small signed record of something that happened — consent given, data erased, authority delegated, a model answer grounded.

→
NotesENGINEERINGAIAug 31, 20264 min read

We measure our own Core Web Vitals now, across nine live surfaces

Every Monday a headless browser loads nine of our public pages, records real Core Web Vitals from the page itself, and runs a WCAG 2.1 AA audit on each. No third-party measurement service is involved.

→
NotesENGINEERINGAIAug 31, 20264 min read

Forty-seven shared packages hold the estate together

Roughly twenty repositories, one shared workspace. Design tokens, the dashboard shell, the module SDK, the AI client and the receipt emitters all live in one place and are versioned once.

→
NotesENGINEERINGAIAug 31, 20265 min read

Our dependency scan reported zero criticals. It had only looked at the repos we happened to have installed.

A fleet-wide npm audit came back with 24 high advisories and no criticals. The loop had silently skipped every repo without a local node_modules — which is exactly where the criticals were sitting.

→
NotesENGINEERINGAIAug 28, 20264 min read

We installed a code-review tool. Its dry-run didn't mention it would rewire git for every repo on the machine.

code-review-graph's --dry-run listed two file changes. The real install set a global git hook path that would have run on all 27+ repos on the box. We checked what it touched, then reverted the part we never approved.

→
NotesCOMPLIANCEAIAug 21, 20264 min read

We audited our own invoice tests. A green suite was hiding a guard that read the wrong number.

Four days into checking our own billing coverage, we found a zero-amount guard that skipped invoicing a real supply, and a credit-note bug that could strand a document with no way back. Both were behind passing tests.

→