goatbot

Apr 2026 · age 44

What it was

A build, deploy and certificate console for the Adama platform, meant to be run and trusted by exactly one operator. It is a single Java jar serving server-rendered HTML over Netty. A poller checks the source every thirty seconds, pulls, and runs a thirteen-stage Maven pipeline whose colored output streams live to a dashboard, because Maven is run under a fake terminal so it keeps its colors. Before shipping, the pipeline refuses to publish any version that already exists in S3. The entire deployment state is one tiny object named current holding a version string, and rollback lists are derived from it. A certificate agent renews Let's Encrypt certificates by dropping challenge tokens into a bucket the platform already serves. Users sign in with Argon2id hashes. It was written in sixteen days, most of it in one Saturday, with an agent brief in the project from the first code commit.

Wins, for the age

• At forty-four, after years inside the object store, Jeff made the artifact store the authority: a change committed without a version bump fails loudly instead of overwriting a release.
• A ledger of unshipped commits, cleared only by a successful build, so a failed log always begins with everything not yet released.
• Deployment as a pointer, finding on its own what Capistrano's current symlink (2006) had already found, and certificates issued without ever terminating TLS itself.
• About 4,200 lines landed in sixteen hours, working, with a brief for an AI agent written into the project from the start. The ape had learned to write instructions for a machine.

What it taught

• A CI server is mostly a process runner with a good log viewer.
• Make the artifact store, not the build machine, the source of truth about what has shipped.
• Briefs drift. The agent brief described a secure cookie the code never set and nine stages against thirteen, within the same day.
• Secrets belong in a secret store from day one, and tests belong in the first commit, not the next project.

Genealogy

Ancestors: Adama: the platform it was built to build, deploy and certify. Career S3: the object store as the source of truth. Farm Cron: a one-person Java server for real operations. Jswam: managing sites and domains on AWS from Java. Wake: sites shipped to S3 without thinking about it. Descendants: Hearth: one jar, Netty, its own certificates, run by one operator.

Epitaph

Here lies goatbot, which colored its logs by lying to Maven about a terminal and refused to ship a version twice. Its most careful work went to a remote its own checkout never pulled.