Ari Lerner builds technical companies, technical leverage, and technical trust across secure AI infrastructure, systems software, and new computing models.https://ari.io/en-ushttps://ari.io/writing/how-to-build-around-an-open-theorem-without-claiming-it/https://ari.io/writing/how-to-build-around-an-open-theorem-without-claiming-it/Ambitious mathematical software can formalize the missing object, prove surrounding machinery, and record evidence while keeping the unresolved crux mechanically open.Sat, 15 Aug 2026 02:08:00 GMTdeep-techuorleanmathematicsresearchhttps://ari.io/writing/a-registry-is-a-graph-not-a-bucket/https://ari.io/writing/a-registry-is-a-graph-not-a-bucket/Once objects have stable identities, a registry has to preserve namespace state, relationships, atomic changes, reconciliation, and reachability—not just blobs.Sat, 15 Aug 2026 02:07:00 GMTdeep-techuorregistriesstoragedistributed-systemshttps://ari.io/writing/a-program-should-be-able-to-resume-somewhere-else/https://ari.io/writing/a-program-should-be-able-to-resume-somewhere-else/A portable suspension needs addressed state, addressed dependencies, explicit host contracts, and fresh authority when execution moves.Sat, 15 Aug 2026 02:06:00 GMTdeep-techhologramruntimesportabilitycontent-addressinghttps://ari.io/writing/research-should-record-what-failed/https://ari.io/writing/research-should-record-what-failed/A useful research repository keeps negative results, pre-declares what would change the plan, and treats instruments that cannot fail as bugs.Sat, 15 Aug 2026 02:05:00 GMTdeep-techuorairesearchmeasurementhttps://ari.io/writing/the-browser-is-a-computer-not-a-thin-client/https://ari.io/writing/the-browser-is-a-computer-not-a-thin-client/Running a real AI compile-and-inference pipeline in the browser changes storage, memory, concurrency, and verification from backend concerns into product architecture.Sat, 15 Aug 2026 02:04:00 GMTdeep-techhologrambrowserwasmaihttps://ari.io/writing/exactness-is-an-interface/https://ari.io/writing/exactness-is-an-interface/When every valid execution path produces the same bytes, memory, scheduling, SIMD, and fallback decisions stop leaking into the caller's contract.Sat, 15 Aug 2026 02:03:00 GMTdeep-techuorrustmathematicsperformancehttps://ari.io/writing/a-hash-can-prove-an-answer-was-not-changed/https://ari.io/writing/a-hash-can-prove-an-answer-was-not-changed/Content addressing gives delegated AI results durable identity and tamper evidence, but correctness still requires recomputation, attestation, or a stronger proof.Sat, 15 Aug 2026 02:02:00 GMTdeep-techhologramaiverificationcontent-addressinghttps://ari.io/writing/meaning-needs-an-address/https://ari.io/writing/meaning-needs-an-address/A hash identifies bytes. A useful object address has to survive harmless changes in representation without pretending every kind of equivalence is the same.Sat, 15 Aug 2026 02:01:00 GMTdeep-techuorcontent-addressingidentityrusthttps://ari.io/writing/delete-everything-except-the-ability-to-prove-who-you-are/https://ari.io/writing/delete-everything-except-the-ability-to-prove-who-you-are/A destructive command exposed two hard problems: defining complete deletion in an evolving system and preserving cryptographic identity as one connected set.Fri, 14 Aug 2026 23:51:00 GMTdeep-techmvmoperationssecurityidentityhttps://ari.io/writing/a-1-gib-filesystem-cost-3-9-gib-of-ram/https://ari.io/writing/a-1-gib-filesystem-cost-3-9-gib-of-ram/A Rust ownership mistake in MVM's ext4 builder multiplied peak memory, and the fix required changing the shape of the pipeline.Fri, 14 Aug 2026 23:52:00 GMTdeep-techmvmrustperformancefilesystemshttps://ari.io/writing/provenance-is-not-logging/https://ari.io/writing/provenance-is-not-logging/Logs describe events. Provenance records who authorized them, why they happened, and which later decisions depended on them.Fri, 14 Aug 2026 23:53:00 GMTdeep-techmvmprovenanceauditsecurityhttps://ari.io/writing/200-milliseconds-is-not-a-boot-time/https://ari.io/writing/200-milliseconds-is-not-a-boot-time/MicroVM latency only means something when the stopwatch includes preparation, verification, activation, first useful work, and cleanup.Fri, 14 Aug 2026 23:54:00 GMTdeep-techmvmperformancemicrovmssystemshttps://ari.io/writing/snapshots-can-clone-memory-not-authority/https://ari.io/writing/snapshots-can-clone-memory-not-authority/A restored microVM can inherit computation, but it needs a fresh identity, fresh channels, and a newly admitted security contract.Fri, 14 Aug 2026 23:55:00 GMTdeep-techmvmmicrovmssnapshotssecurityhttps://ari.io/writing/a-security-claim-is-code/https://ari.io/writing/a-security-claim-is-code/Security promises need a threat model, an enforcement mechanism, and a witness that breaks when the mechanism does.Fri, 14 Aug 2026 23:56:00 GMTdeep-techmvmsecuritytestingrusthttps://ari.io/writing/the-safest-nic-is-no-nic/https://ari.io/writing/the-safest-nic-is-no-nic/MVM removes the routable guest NIC and puts network authority behind a host-controlled vsock boundary.Fri, 14 Aug 2026 23:57:00 GMTdeep-techmvmsecuritynetworkingmicrovmshttps://ari.io/writing/ai-agents-need-a-machine-boundary/https://ari.io/writing/ai-agents-need-a-machine-boundary/Prompt rules are not a security boundary. Agent runtimes need enforceable capabilities, isolated execution, mediated I/O, and a deliberately small blast radius.Fri, 14 Aug 2026 00:00:00 GMTaisecuritysystemsrusthttps://ari.io/writing/invisible-ai/https://ari.io/writing/invisible-ai/The advances in AI are incredible, but the most important systems will disappear into ordinary life.Mon, 25 Mar 2024 00:00:00 GMTaiproductfuturehttps://ari.io/writing/blue-sky-cream-soda/https://ari.io/writing/blue-sky-cream-soda/Memories of my father and the derivative meaning of snacks.Sat, 12 Feb 2022 00:00:00 GMTlifebusinessauthenticity