TL;DR on AI-assisted or agentic coding: Some things change; some things stay the same. The same: - Code sent for review needs to be *reviewable* - Trust but verify, all the way through your SDLC - Getting far "off main" accrues technical debt - Risk tolerance informs where and how you experiment

Late for work because I couldn’t stop typing about the economic realities of open source maintenance on LinkedIn dot com. TL;DR: stipends won’t save us. What worked out of post-Sunburst funding (similar spike to Mythos) was full-time jobs that supported security work long term.

I don’t think wool flats are very good for racking and stacking…

I’m working to standardize how we do community working groups/office hours at @roost.tools, including the nitty gritty like: • scheduling/reminders • agenda sharing • notetaking • noting/following up on action items Community peeps, what are YOUR tips? What tools are clutch? What should we avoid?

"The open secret of child safety is that no one can say how well [CSAM detection models] work...When we cannot know what these systems work well for, who they are failing, and where there are gaps that may be augmented in other ways, we risk harming those who are most vulnerable online."

If you're an open source lover and infrastructure person (aka were roaming the halls of #KubeCon or will find all the storage and data pipeline talks at #ATmosphereConf), @roost.tools is looking for you! We've got fully remote, Infrastructure Engineering roles now open: roost.tools/infrastructu...

This is the face of a dog who can hear the downpour outside and would rather get a UTI than leave his blanket nest for that.

We hear a lot of, "I really just need..." when we ask developers about their platform safety challenges. While some are platform-specific (so won't be shared w/o permission), so many are universal requests. We started a "safety tools wishlist" for more ideas and upvotes: github.com/orgs/roostor...

There is only one correct answer to this question: “The thing about Arsenal is they always try to walk it in.”

A lot of good conversations at #GDC2026 about what game developers are struggling with in making safe play experiences and protecting their users ❤️

At #GDC next week with safety on your mind? Come find me for a chat about the open source tools we've built at @roost.tools for harms like abusive behavior, anti-cheat and fraud, and child safety. I don't have a lot of swag, but free software for better gaming is a pretty good giveaway.

The problem with Masters sports is that you get better, but your body gets older. Had my best ski race ever this weekend, but today I can barely lift the coffee to my face.

If you were laid off from Block (or anywhere) and want to stay remote, @roost.tools is hiring for multiple SWE roles and levels. If you're the kind of person who's deeply satisfied by figuring out why a service has multiple databases and ripping some out, we might be for you! roost.tools/careers

Goodbye, FOSDEM; hello, @protocolsforpublishers.com! Headed to London with lots of FOSDEM-attendee feedback on what's needed to make online safety easier for independent and decentralized communities (and all the @roost.tools swag I stole from @cassidyjames.com...)

Digital sovereignty and resilience conversations over the last few years have focused on infrastructure — compute, cloud capabilities — but it’s time to add safety to that list of critical digital infrastructure. Great overview on what this means from @aditya.myatproto.social

@cassidyjames.com and I will be at #FOSDEM and will be demoing* Osprey in our talk Sunday morning: fosdem.org/2026/schedul... *Let's be honest, should we really test the wifi and live demo overlords first thing Sunday morning? Probably not. Probably pre-recorded.

If you're a software versioning nerd, you know your first 1.0.0 is a big deal. 1.0 means a stable project ready to go, and that's been proven by the multiple users who've rolled out Osprey as their real-time investigation tool. A massive thank you and congratulations to the Osprey contributors!

If you're headed to #FOSDEM and want to talk open source tools for online safety, @christchurchcall.bsky.social and @roost.tools are hosting a lunch meet up on FOSDEM Saturday! Get out of the food truck line cold and meet others interested in OSS for safety: tinyurl.com/fosdemsafetylunch

Unfortunately I know nothing about chicken development, so if @roost.tools were a dog, we'd still have oversized puppy feet. AND YET we put free online safety tools out in the world, users are running them in production, and there's a community growing around them. A strong start for 11 months in!

Growth is scrubbing your office coffee mug *before* you leave your desk for the year.

When the core primitives of trust and safety infrastructure are open source, everyone gets to experiment, tweak, and make it work for them, like @hailey.at just did.

We got good feedback on the job description, which Diffie* has incorporated. TL;DR: If you've architected data-intensive systems and are familiar with an infrastructure-level language like Python, Go, or Rust we want to hear from you! roost.tools/staff-softwa... *supervised my typing from the couch

@roost.tools isn't just openly licensing our tools, but also openly developing them. We just released an initial draft of the ROOST tooling roadmap, but it's just that -- a draft. If you're interested in OSS trust and safety tools, now's the time to shape what gets built! github.com/orgs/roostor...

“You think I’m going to leave my blanket burrito to go pee outside during an Atmospheric River? Am I a joke to you?”

This is Diffie. He’d like to be your coworker. Paws are no good for filling out job applications, though, so YOU’LL have to apply to the open software engineering roles at @roost.tools roost.tools/staff-softwa... (don’t fit the level? Apply anyways to express your interest in upcoming openings)

Every September 1: “I’ve got time to get in biathlon shape; it’s basically summer still!” Every December 1: “Oh no…”

Since joining @roost.tools, I've had some fun conversations about, "How does this #opensource thing work?" There's so much #trustandsafety has to gain from having open source infrastructure as its core. Happy to answer all the questions about how this works (while I peel Thanksgiving vegetables..)!

I did not have evangelizing open source to the literal pope on my new job bingo card, but that’s legitimately pretty awesome. 😆

Waiting for the next King County elections ballot drop? Here’s a good boi to help pass the time.

Join @roost.tools, @hf.co, and OpenAI for a hackathon around gpt-oss-safeguard on December 8, 2025 in San Francisco! If you’re a developer, T&S expert, or policy wonk, see you there! events.openai.com/gpt-oss-safe...

ROOST.tools has been building against the DIRE framework for online trust and safety: Detection, Investigation, Review and Enforcement. ROOST's Coop and Osprey tools address I, R, and E, but Detection is best addressed by classification models. Enter gpt-oss-safeguard from OpenAI

I am SO excited to share that the fantastic @cassidyjames.com is joining @roost.tools as our OSS Community Manager! Hear from Cassidy on this (very) exciting news cassidyjames.com/blog/ive-joi...

If your company is a heavy Python user and has surplus budget to assign before EOY, now’s a great time for an unrestricted donation…

The more I read about the challenges of effective CSAM reports, the more it reminds me of where security vulnerability reporting was pre-CVE. The CVE system isn’t perfect, but it’s nothing short of amazing how a group of people came together and created what would become an industry-wide standard.

PSA: I had to go grab something off That Other Platform, and my privacy settings were not how I left them…

I recently learned the vet’s ticketing system takes photos and the front desk enjoys them immensely. Fast forward to text message threads that are just snoots asking for refills.

Want to work on open source full time? The @roost.tools engineering team is starting to hatch! Come build OSS tools making a difference in Trust & Safety. This is a fully remote role, though some schedule overlap with North American time zones is expected. www.linkedin.com/jobs/view/43...

there's some more to do here in the repo to get it where i want, but will probably write a leaflet soon on making moderation work for people that are not Bluesky PBC. hoping that this will be a good step in that direction.

“Hey $assistant, play ‘Frenzal Rhomb.’” “Okay, now playing romantic music.” Can’t decide if this is wrong, or the super-intelligence we’ve been waiting for…

I’d like to think I’m scam-aware, but if someone put Moto Guzzi parts at the end of the phishing line…it’s a vulnerable time out there in motorsports land.

My co-author for all correspondence. He lacks opposable thumbs and grammar skills, but he makes up for it in unbridled enthusiasm.

Shamelessly bringing this to the top of your feed. ROOST is doing something special in how we’re bringing #opensource to Trust and Safety. Come join us!

The 2025 Social Web Needs Assessment is live. From Nostr to Mastodon, Discord to Bluesky – if you moderate, this is for you. Share your experience and help shape the next year of resources and advocacy. See about.iftas.org/moderator-ne... for details. Any platform, any protocol.

@roost.tools is picking up steam which means we’ve got some pretty immediate needs in open source community management! If you know how to make OSS releases come together and herd the open source cats, ROOST is looking for you: lnkd.in/gSiHubXm

Many of my TrustCon conversations were about putting open source into the context of #trustandsafety (ie OSS licensed software can't suddenly be taken away...). I realize there are some OSS development norms that will be new (and a little surprising!) to T&S teams: www.linkedin.com/pulse/bringi...

Seafair week: when the Seattlites on the video call reveal themselves by suddenly looking out the window at the same time ✈️

PgUS is looking for volunteers! We have jobs both large and small so even if you only have a little time to give, we’d love to hear from you! docs.google.com/forms/d/e/1F... #PostgreSQL #postgres #volunteer

Past Anne: I’m a careful person, I can have white running shoes. ::runs the Presidio in the rain:: Welp. There’s that.

I think I’d summarize my first #trustcon as the loveliest of people discussing the darkest of topics. It’s truly something else ♥️

🚨ROOST is announcing Coop and Osprey: two new, open-source online safety tools. ✅ Customizable ✅ Open source ✅ Trusted integrations A better way to handle online harm, built by people who get it. More here: roost.tools/blog/roost-a... #TrustandSafety