Hi, I’m Jerome.

VP Sales Engineering @Varonis by day — so yes, I know what bad opsec looks like. Compulsive automator, dotfiles nerd, and builder of tools nobody asked for. Apple fanboy, AI enthusiast, tech and crypto watcher. Suit during the week, hoodie and sneakers on weekends. Wine, racing, running, and terminals the rest of the time. Gamer in theory, not in practice — the backlog is real. This is my nerdy corner of the internet — expect anything.
Omarchy on MacBook Pro

Omarchy on MacBook Pro: Zero-Friction Arch Linux on Apple T2 Hardware

The Spark: Waking Up Apple Hardware I have always had an appreciation for Apple hardware. The milled aluminum unibody chassis, the color-accurate Retina display, and the Force Touch trackpad—whose precision remains unmatched in the PC laptop world. Mechanically, these machines are industrial masterpieces. In an earlier post on resurrecting Intel Macs for a 128GB homelab, I wrote about giving a 2013 Mac Pro and a 2018 Mac Mini a second life under Fedora and Windows. But on a daily laptop, recent macOS releases have become increasingly frustrating: background telemetry accumulates, the OS locks down further, and machines with massive raw processing power end up throttled by software choices that no longer align with a terminal-centric, agent-driven CLI workflow. ...

September 6, 2026 · 6 min · Jerome Soyer
Claude Max to SuperGrok Heavy

From Claude Max to SuperGrok Heavy: Six Months at the Top, Then the Big Switch

Context: I’m not a casual user When Anthropic launched Claude Max in April 2025, I signed up for the 20x tier at $200/month without hesitation. Not out of snobbery — out of necessity. My workflow described in AI-First Engineering never revolved around a graphical IDE: it’s the CLI, always the CLI. Claude Code and Grok Build in Herdr panes, steered from the couch via Moshi on iPhone, synchronized via aictx and orchestrated by HivePilot. ...

August 22, 2026 · 16 min · Jerome Soyer
MCP Servers Hands-On

MCP Servers, Hands-On: Exposing My Homelab to My Agents

The Missing Cable Between Agents and Everything Else If 2025 was the year agents got good at writing code, 2026 is the year they got good at doing things — and the thing that made that jump possible is the Model Context Protocol. MCP is, at its heart, a boring and beautiful idea: a standard way for an AI agent to discover and call tools, regardless of who built the tool or the agent. ...

June 24, 2026 · 6 min · Jerome Soyer
Securing Your AI Agents

Securing Your AI Agents: Least Privilege for the Age of Autonomy

The Blog Name Was a Promise This blog is called The Least Privilege Life. I spend my days at Varonis helping organizations make sure attackers can’t touch data they have no business touching. And yet, if you scroll through my archive, you’ll find article after article about giving software more access — 650+ skills wired into my dotfiles, multi-agent orchestration, a modular AI forge. There’s a tension there, and it’s time I addressed it head on. ...

June 12, 2026 · 7 min · Jerome Soyer
AI-First Engineering

AI-First Engineering: My 650+ Skills Dotfiles Evolution

The Terminal is the New IDE In early 2026, the way we interact with code changed forever. I no longer spend most of my time typing characters; I spend it orchestrating context. My dotfiles have evolved from simple shell aliases to a comprehensive AI Orchestration Layer. This is the “Least Privilege Life” applied to engineering: providing exactly the right context to the right tool at the right time. The Ecosystem: 190+ Agents, 650+ Skills My environment isn’t just a shell; it’s a factory. I’ve integrated three primary AI CLI tools, all sharing a common brain managed through my dotfiles: ...

April 11, 2026 · 2 min · Jerome Soyer
Synapse AI Forge

Synapse: Building a Modular AI Forge on Fedora 43

Beyond the Chatbot If you’ve followed this blog, you know my obsession with local-first systems. Running a basic LLM is easy. Building a professional-grade AI infrastructure that is reproducible, secure, and high-performance is a different story. Enter Synapse: my dedicated AI forge. While my Macs handle the interfaces, Synapse is the heavy lifter. Built on Fedora 43, it’s designed to provide a “zero-trust” environment for training and inference. The Hardware Stack To handle modern models (Llama 3, Mistral) with large contexts, I chose a balance of core count and VRAM: ...

March 25, 2026 · 2 min · Jerome Soyer
Yapee browser extension

Yapee: I Rebuilt a PyLoad Manager Because Manifest V2 Broke It

If you self-host downloads with PyLoad, you’ve probably used Yape — the classic browser extension that lets you manage downloads without opening a web interface. It was simple, it worked, and then Google killed it. Manifest V2 was deprecated, and Yape was abandoned. So I rebuilt it from scratch. Yapee is the spiritual successor: a modern browser extension for Chrome, Firefox, and Edge that handles everything the old extension did, plus features that make managing multiple PyLoad servers actually pleasant. ...

March 17, 2026 · 5 min · Jerome Soyer
Intel Mac Homelab

Intel Mac Renaissance: Building a 128GB Combined RAM Homelab

The 32GB Wall My previous Homelab center—a custom-built i7 Proxmox node—was a champion for years. But as my development workflow shifted towards local AI, heavy container orchestration, and multi-OS security labs, 32GB of RAM became a suffocating bottleneck. I was constantly fighting swap death and micro-managing service uptimes. I needed a significant upgrade, but I wanted to stay true to the “Least Privilege Life” philosophy: maximum control, minimal noise, and efficient hardware reuse. ...

March 5, 2026 · 3 min · Jerome Soyer
Raycast Kitty Extension

Unleash the Cat: Controlling Kitty Terminal with Raycast

Let’s be honest: we all spend 90% of our lives in the terminal, and the other 10% wondering which of the 57 open tabs contains that one tail -f we started three hours ago. As a die-hard fan of Kitty (the fast, GPU-based terminal beast) and a daily user of Nushell (because why use old shells when you can have structured data?), I needed a way to bridge the gap between my macOS workflow and my terminal addiction. ...

March 5, 2026 · 2 min · Jerome Soyer
AI Job Application Pipeline

I Built an AI-Powered Job Application Pipeline

I have a confession: I built an entire infrastructure to automate job applications. The technical achievement is worth more than any single outcome it produced. Here’s why I built it, how it works, and what it taught me about recruitment that you probably don’t want to know. The Problem You know that feeling when you’re applying to jobs and you’re manually tweaking your CV for every single position? Removing frameworks that aren’t relevant, reorganizing bullet points to highlight the right skills, adding specific keywords from the job description, rewriting your cover letter from scratch each time? ...

February 19, 2026 · 5 min · Jerome Soyer