tweagio

At Tweag, we have been auditing Cardano smart contracts since 2021. We started out reviewing contracts mostly by hand, but it did not take long before we began building tooling to make our audits more efficient and systematic - most notably cooked-validat

Topiary is a uniform formatter designed to support multiple languages through a single, consistent interface. By relying on Tree-sitter grammars and formatting queries, it easily adapts to new languages. But what happens when a language contains other lan

.acknowledgements { margin-top: 4em; border-top: solid 1px lightgrey; font-size: 75%; color: grey; } I recently found a way to represent sheaves in Haskell. It was a fun couple of weeks of head-scratching. But as much as I wanted it to, the code in my dem

This post presents a little epic to insert static checks in Haskell's Diff package using Liquid Haskell (LH).1 Static or compile-time checks are helpful to confirm formerly implicit assumptions in the implementation, providing an additional layer of assur

.lyrics { display: flex; align-items: flex-start; gap: 1.5em; margin: 2em 0; } .lyrics .gatsby-resp-image-wrapper { flex-shrink: 0; width: 128px !important; max-width: 128px !important; margin: 0 !important; } .lyrics img { width: 128px; height: auto; } .

We say that a system is reliable if it continues to function correctly when events outside the system affect it. Many factors can impact the reliability of Bazel builds, especially dependencies on external services. In this post, we'll focus on what can g

We released Nickel 1.0 in May 2023. Since then, we've been working so hard on new features, bug fixes, and performance improvements that we haven't had the opportunity to write about them as much as we would've liked. This post rounds up some of the big c

/ Condense code blocks slightly, so the figlet renders better / code.language-text { line-height: 1.35 !important; } section.crawler { font-style: italic; color: grey; margin-bottom: 4em; } span.byline { font-size: 75%; color: grey; } span.mention { color

Coverity is a proprietary static code analysis tool that can be used to find code quality defects in large-scale, complex software. It supports a number of languages and frameworks and has been trusted to ensure compliance with various standards such as M

Security in software development has evolved dramatically, yet it's still one of the easiest things to postpone. Everyone knows it should start early - vulnerabilities are cheaper and simpler to fix when caught before deployment, but deadlines and complex