hnq.me

Self-taught developer / Systems notes

A quiet place for
life, systems,
and long learning.

I am Huynh Nhan Quoc, a self-taught developer from Tam Ky, Vietnam. I have been learning through real products, broken deployments, private systems, and years of starting again. This site keeps that road in one place: the ideas, the work, and the life around them.

2015 Started learning
Tam Ky Home
Go + JS Working tools
In public Current chapter

Ways into this site

Enter through the question you have.

Explore the archive

One body of work, several ways in.

Look up one concept, follow a topic across formats, or begin with a collection selected in reading order.

choose where to begin
concepts
31
articles
64
topics
20
collections
4
Featured collection Runtime foundationsA path through source code, bytecode, virtual machines, and the boundaries of execution. 9 entries

Now

What is moving today.

Building Kitwork Runtime workbench for multi-tenant websites Learning / 2026-07-09 Zero VM A beginner-friendly guide to understanding requests that bypass VM execution. Writing / 2026-08-01 Every Building Journey Deserves Respect Source / 9e21988 feat(hydrate): $app is a curated capability surface; coerce range models to number $app becomes a component handle instead of a kernel special-case. It was hardcoded to = window.kit in three scope proxies, so a markup expression (increasingly agent- authored) could reach the entire runtime — $app.destroy(), $app.internal.pageScope, $app.module(...). Now: - $app is a curated, DEFAULT-DENY view of the runtime: appGrants lists the ~38 real capabilities (from the web/native modules + what tenants use); everything else — the runtime's own control API (render/component/module/internal/destroy/run/scope/ has) — is undefined through $app. Capabilities bind to kit (this = kit preserved). - Registered via the SAME alias mechanism as $sidebar/$theme (aliases["$app"]), not a special-case; the three hardcodes are gone. The kernel auto-provides $app globally, so no page boilerplate. - data-kit-alias: a clean attribute to alias any component (data-kit-component="app" data-kit-alias="$app"), alongside the existing name=$alias syntax. An audit confirmed no tenant uses $app as a whole object, so curating breaks nothing. This makes a curated $app the concrete first instance of "a controlled capability surface for generated code" — the toolset agents will author UIs against. Also: data-kit-model on a type=range (like type=number) now coerces to a float, so n + step adds instead of string-concatenating ("0" + "3" = "03"). Caught by the showcase demo. Fixed both ends (kernel modelValue + server modelScope), with the shim taught input.type for the test. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> 2026-08-06

Latest articles

Fresh from the long road.

archive
Newest / 2026-08-01 Every Building Journey Deserves Respect A reflection on building in public, handling disagreement, and respecting the effort behind every product. Behind every project is a real person investing time, money, hope, and countless attempts... read article

A concept becomes executable

The path from text to behavior.

01 Source
02 Lexer
03 AST
04 Compiler
05 Bytecode
06 VM

Runtime

The place where code receives memory, values, limits, and a world in which to run.

Bytecode

The compact instruction layer between source language and machine behavior.

Virtual machine

A machine made of software that reads those instructions and enforces their boundaries.

explore all concepts

The road so far

Not a straight line.

2015

Blogger and HTML. The first small changes that made the hidden structure of a website visible.

2018

A friend's coffee shop and a Firebase night. Dependency stopped being an abstract technical word.

2020

Home, delivery work, and Kitstack. Real projects began shaping a private Go platform.

Now

Opening the useful parts. Kitwork, concepts, articles, and source code turn private lessons into public material.

This site is also an experiment

The URL follows the directory tree.

Each folder can inherit layout, metadata, and runtime behavior from the folders above it. The page you are reading is both a personal homepage and a working Kitwork tenant.

Search