We are working on a configuration management data streaming platform.

How can you secure your infrastructure if you do not know the shape and scope of your infrastructure at any given moment?

Without that picture, every change to infrastructure, applications, and their configuration is made blind. You cannot see the relationships and dependencies between components, so you cannot know what a change will affect until something breaks.

We will soon migrate our repositories from GitHub to SSHadowForge, our own forge. GitHub will remain a mirror for public releases of our solutions.

Why? We want hermetic, reproducible builds, including the ability to re-run historic builds on historically accurate infrastructure.

This might seem extreme. But if we can achieve this level of control, we can live up to our core tenet: “Don’t Trust Us, Verify Us”.