field notes codename
24 notes filed under KEEL, newest first. Same rules as the rest of the pile: a codename, a theme, and no internals.
Per-port rules look like security and behave like a promise to remember every port. Workloads get new ports when they are rescheduled, and the rule list does not grow with them, so the estate accumulates silent holes that nobody wrote down.
elsewhere
Each codename is a project. The theme is the class of problem the note is about — the same theme recurs across projects, which is usually the interesting part.