Self-hosting · Engineering retrospective
Self-hosting is an operations problem
A home-server retrospective: what a small Docker setup taught me to reconsider about trust boundaries, credentials, backups, updates, and recovery.
Read the retrospectiveRust · AOSP · Device security
Codrut Erdei
Firmware & Platform Security Engineer
I work on Android-based robotics systems at Axon, building Rust services and owning firmware-security work from architecture through production release.
My focus is the whole device: how services interact, where trust boundaries sit, how updates are delivered, and what happens when something fails.
What I take responsibility for
Security boundaries
Secure boot, encryption, SELinux policy, and threat remediation. Work that connects platform architecture to the controls protecting the device and its data.
Platform integration
Rust native services, on-device daemons, and Binder/AIDL interfaces. Tracing behavior across codebases and teams to establish the integration contract.
Production delivery
Soong and Jenkins builds, OTA signing, and release integration. Owning the delivery path alongside the software that runs on the device.
A background across connected systems
Before Axon, I worked on Renault in-vehicle Android systems, identity and security at Wio Bank, industrial IoT at WOLF, and mobile and backend products. That experience informs how I approach the boundaries between a device, its applications, and the services supporting it.
Read my engineering experience