https://babysoarus.hisn.io/blog/ Engineering notes and straight answers. https://babysoarus.hisn.io/blog/sandboxing-python-inside-splunk.html https://babysoarus.hisn.io/blog/sandboxing-python-inside-splunk.html Thu, 27 Aug 2026 09:00:00 GMT Real Python in the search bar, inside a WebAssembly sandbox, with microseconds of warm overhead. How, why, and the parts that fought back. https://babysoarus.hisn.io/blog/when-you-stop-paying.html https://babysoarus.hisn.io/blog/when-you-stop-paying.html Thu, 27 Aug 2026 09:00:00 GMT A published price in a market with none, and expiry behaviour bound in the contract: searches keep running, nothing is deleted, and your detection estate is not a hostage. https://babysoarus.hisn.io/blog/splunkd-hidden-column.html https://babysoarus.hisn.io/blog/splunkd-hidden-column.html Thu, 27 Aug 2026 09:00:00 GMT sorted(events) broke at row 36 with an error no documentation mentions. The answer was inside the splunkd binary, one strings invocation away.