Writing
Essays, analysis, and notes on applied AI, digital assets, investigations, and the systems around them.
- Sep 26, 2026 · Investigation A Case File a Reader Can Check A public case file should expose its evidence, limits, and unresolved questions so readers can inspect the reasoning, not just the verdict.
- Sep 23, 2026 · Investigation How an Investigation Ends Some investigations close, some become monitoring, some leave the chain entirely. Unsolved often means the answer sits with an institution or a court.
- Sep 19, 2026 · Investigation Shared Infrastructure Is Not Evidence of Common Control Two wallets do not share an operator because both touch a sponsor, bridge, router, or exchange. Widely used infrastructure is context, not proof of control.
- Sep 15, 2026 · Investigation The Lead Is Not the Case I keep unverified observations separate from case work. An interesting address is not a case until evidence justifies promoting it for deliberate investigation.
- Sep 11, 2026 · Investigation Why My Numbers Are Floors, Not Totals A trace total is the minimum the record shows, not all that moved. Pagination, coverage windows, and source limits make a clean figure a claim with boundaries.
- Sep 3, 2026 · Investigation Falsify First: The Question I Ask Before I Believe My Finding Before reporting a finding, I ask what else could produce the same on-chain record. A conclusion is only as strong as the alternatives it has survived.
- Aug 30, 2026 · Investigation Evidence Tiers: Why a Good Report Says Consistent With, Not Proven A sound forensic report separates what the chain proves, what evidence supports, what describes infrastructure not identity, and what stays unresolved.
- Aug 11, 2026 · Investigation How a Standing USDT Approval Can Expose Funds That Arrive Later An anonymised Tron USDT drain: a standing approval can outlive an empty balance and expose funds that arrive later. Recovery needs off-chain evidence.