https://kevinkeller.org/Recent content on Kevin KellerHugo -- gohugo.ioenkellerkev@gmail.com (Kevin Keller)kellerkev@gmail.com (Kevin Keller)© 2026 Kevin KellerFri, 05 Jun 2026 00:00:00 +0000https://kevinkeller.org/posts/duckicelake-iceberg-v3-rest-catalog-ducklake/Fri, 05 Jun 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/duckicelake-iceberg-v3-rest-catalog-ducklake/A full Iceberg REST Catalog proxy that materialises DuckLake’s snapshot state into Iceberg manifests on demand — giving standard Iceberg clients (PyIceberg, DuckDB, Trino, Spark) read/write access to a DuckLake-backed lakehouse.https://kevinkeller.org/posts/lakesh-duckdb-sql-shell-iceberg-rest-mcp/Fri, 05 Jun 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/lakesh-duckdb-sql-shell-iceberg-rest-mcp/A DuckDB-powered SQL shell for Iceberg REST catalogs and DuckLake metastores — profile-based connection management, psql-style meta-commands, and an MCP server so LLM agents can query your catalogs directly.https://kevinkeller.org/posts/nanocortex-web-agent-production-ai-knowledge-management/Fri, 05 Jun 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/nanocortex-web-agent-production-ai-knowledge-management/An AI knowledge management agent with a web interface, zettelkasten knowledge graph ingestion, document approval workflow, optional web search, and a skills system — powered by the Snowflake Cortex Agent API.https://kevinkeller.org/posts/turboquant-kv-cache-local-llm-consumer-hardware/Thu, 30 Apr 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/turboquant-kv-cache-local-llm-consumer-hardware/KV cache is the memory wall that limits context length on consumer hardware. TurboQuant shrinks it 5x with minimal quality loss — here’s a ready-to-run build that packages llama.cpp with TurboQuant KV compression into a single conda install.https://kevinkeller.org/posts/softether-site-to-site-vpn-onprem-aws-azure/Fri, 03 Apr 2026 07:30:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/softether-site-to-site-vpn-onprem-aws-azure/How to build a multi-site VPN mesh with SoftEther – connecting an on-premise network, an AWS VPC, and an Azure VNet through a central VPN hub. Full setup: SoftEther server, TAP interfaces, iptables routing, dnsmasq, and site-to-site bridge configuration.https://kevinkeller.org/posts/snowflake-container-services-deep-dive/Fri, 03 Apr 2026 06:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-container-services-deep-dive/A comprehensive deep dive into Snowflake Container Services — security architecture, compute isolation, ingress/egress controls, PAT authentication, CORS, private connectivity, and tunneling approaches (SSH, WebSocket, Tailscale, ngrok) to connect SPCS to your own infrastructure.https://kevinkeller.org/posts/snowflake-container-services-ssh-tunnel-dmz/Thu, 02 Apr 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-container-services-ssh-tunnel-dmz/How to establish persistent, bidirectional SSH tunnels from Snowflake Container Services to any machine you control — using base64-encoded keys in Snowflake Secrets, autossh for resilience, reverse port forwards, and nginx to expose SPCS services with SSL on your own domain.https://kevinkeller.org/posts/beyond-rbac-purpose-aware-access-control-ai-agents/Tue, 31 Mar 2026 12:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/beyond-rbac-purpose-aware-access-control-ai-agents/RBAC tells you if a role can access a table. But can this agent invoke this tool on this data for this purpose? The industry is building the pieces — Cedar, Proofpoint, Cisco, Immuta — but the unified policy engine that evaluates all attributes across all layers doesn’t exist yet.https://kevinkeller.org/posts/ducklake-pixi-data-lake-under-10-euros/Mon, 30 Mar 2026 12:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/ducklake-pixi-data-lake-under-10-euros/A complete data lake with row-level access control, S3 storage, and SQL analytics — managed entirely through pixi, running on Hetzner for under 10 euros a month.https://kevinkeller.org/posts/snowflake-mcp-external-oauth-authentication/Mon, 30 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-mcp-external-oauth-authentication/Snowflake’s managed MCP servers work with external OAuth tokens — JWT-signed, role-scoped, and RBAC-enforced. Tested end-to-end with tool discovery and SQL execution.https://kevinkeller.org/posts/layered-architecture-python-conda-supply-chain-security/Sat, 28 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/layered-architecture-python-conda-supply-chain-security/Signing alone wouldn’t have stopped the LiteLLM backdoor — the attacker used the real credentials. This article explores a layered defense architecture for the Python and conda supply chain: Sigstore signing, Anaconda curation, Chainguard rebuilt-from-source, and runtime containment.https://kevinkeller.org/posts/turboquant-vector-compression-ai-agents/Sat, 28 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/turboquant-vector-compression-ai-agents/Google’s TurboQuant compresses embedding vectors to 3-4 bits with under 2% recall loss — no training required. Here’s why that matters for AI agent memory systems.https://kevinkeller.org/posts/snowflake-federal-zero-trust-architecture/Fri, 27 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-federal-zero-trust-architecture/Snowflake provides a unified Zero Trust control plane for both data and AI inference. This blueprint maps Snowflake and Cortex to NIST 800-207, CISA’s Zero Trust Maturity Model, and OMB M-22-09 — one governance layer, one policy stack, no shadow AI.https://kevinkeller.org/posts/zettelkasten-memory-layer-ai-agents/Fri, 27 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/zettelkasten-memory-layer-ai-agents/A pluggable semantic memory layer for AI agents inspired by the Zettelkasten method — auto-linking, importance scoring, and graph traversal across CrewAI, LangGraph, and Claude Code.https://kevinkeller.org/posts/smcp-secure-model-context-protocol/Thu, 26 Mar 2026 08:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/smcp-secure-model-context-protocol/A proof-of-concept that layers authentication, encryption, and multi-agent coordination onto MCP — with four security tiers from API keys to enterprise OAuth2 with audit trails.https://kevinkeller.org/posts/robyn-extensions-rust-powered-python-api/Thu, 26 Mar 2026 07:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/robyn-extensions-rust-powered-python-api/A set of Rust-backed extensions for the Robyn web framework — Pydantic v2 validation, JWT/OAuth2 auth, token-bucket rate limiting, and auto-generated OpenAPI docs. Sub-microsecond overhead.https://kevinkeller.org/posts/snowflake-aes-cbc-column-encryption-key-management/Thu, 26 Mar 2026 06:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-aes-cbc-column-encryption-key-management/Four sample methods for managing encryption keys in Snowflake — from session variables to cloud KMS to HYOK key wrapping — ensuring sensitive data is protected with keys you control. Postgres pgcrypto compatible.https://kevinkeller.org/posts/snowflake-federated-queries-cross-account-oauth/Mon, 23 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-federated-queries-cross-account-oauth/How to execute SQL across Snowflake accounts using the SQL API with OAuth — covering Client Credentials (Entra ID), Self-Signed JWT (GCP), PAT, and Key-Pair authentication with full architecture diagrams and code.https://kevinkeller.org/posts/snowflake-siem-webhook-notifications/Mon, 23 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-siem-webhook-notifications/How to send security alerts from Snowflake directly to your SIEM using native webhook notification integrations — with working examples for Splunk HEC and Microsoft Sentinel, plus a hybrid approach for dynamic OAuth tokens.https://kevinkeller.org/posts/google-productivity-skill-ai-coding-agents/Mon, 23 Mar 2026 09:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/google-productivity-skill-ai-coding-agents/An open-source skill that teaches any AI coding agent — Cortex Code, Claude Code, or others — to automate Google Slides, Sheets, Docs, Drive, and Forms using natural language prompts.https://kevinkeller.org/posts/snowflake-security-ops-skill-cybersecurity/Mon, 23 Mar 2026 08:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-security-ops-skill-cybersecurity/An open-source AI skill that teaches any coding agent to build threat detection pipelines, hunt anomalies, and automate incident response in Snowflake — with OWASP, MITRE ATT&CK, and NIST CSF built in.https://kevinkeller.org/posts/splunk-snowflake-security-datalake/Mon, 23 Mar 2026 07:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/splunk-snowflake-security-datalake/A better-together reference architecture combining Splunk’s real-time detection with Snowflake’s cost-effective data lake — federated search via DB Connect, 70-80% cost optimization, and years of historical retention.https://kevinkeller.org/posts/postgres-agent-orchestrator-pgmq-llm/Fri, 20 Mar 2026 14:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/postgres-agent-orchestrator-pgmq-llm/An open-source demo that coordinates multiple AI agents using only PostgreSQL — pgmq for task queuing, LISTEN/NOTIFY for event-driven coordination, ltree for lineage tracking. No Redis, no Kafka, no vector database.https://kevinkeller.org/posts/how-privatelink-and-dns-work/Fri, 20 Mar 2026 12:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/how-privatelink-and-dns-work/A visual walkthrough of private connectivity — how PrivateLink creates private endpoints, how DNS resolution steers traffic off the public internet, and why this matters for regulated workloads.https://kevinkeller.org/posts/how-jwt-tokens-work/Fri, 20 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/how-jwt-tokens-work/A visual, hands-on explanation of JSON Web Tokens — what they contain, how signing works, why they expire, and how Snowflake uses them for External OAuth authentication.https://kevinkeller.org/posts/postgres-analyst-natural-language-sql-ollama/Fri, 20 Mar 2026 10:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/postgres-analyst-natural-language-sql-ollama/An open-source semantic layer that lets you query PostgreSQL in plain English using local LLM inference via Ollama. No API keys, no cloud — just your database and a local model.https://kevinkeller.org/posts/containing-ai-agents-production/Thu, 19 Mar 2026 12:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/containing-ai-agents-production/Generic agents can do anything — which is exactly the problem. Custom agents in containers behind an inference proxy create a production architecture where security is structural, not aspirational.https://kevinkeller.org/posts/building-agentic-enterprise-custom-agents-production/Thu, 19 Mar 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/building-agentic-enterprise-custom-agents-production/The agentic enterprise is real. But getting there requires a shift from generic protocol-based integrations to purpose-built agents with native tooling, embedded security, and domain-specific intelligence.https://kevinkeller.org/posts/snowflake-cortex-proxy-ai-coding-agents/Wed, 18 Mar 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-cortex-proxy-ai-coding-agents/A high-performance Rust proxy that lets Claude Code, Continue.dev, ZeroClaw, Mistral Vibe — or any AI coding agent — use Snowflake Cortex, OpenAI, Anthropic, or Ollama as their backend. Optional prompt policy enforcement included.https://kevinkeller.org/posts/governing-ai-inference-data-cloud/Tue, 17 Mar 2026 12:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/governing-ai-inference-data-cloud/A defense-in-depth security architecture for AI agents and inference workloads — covering network isolation, identity propagation, authorization, data protection, and auditing under the EU AI Act, DORA, and NIS2.https://kevinkeller.org/posts/data-sovereignty-querying-onprem-iceberg-from-snowflake/Mon, 16 Mar 2026 12:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/data-sovereignty-querying-onprem-iceberg-from-snowflake/Some data cannot move to the cloud. Here’s how to bring Snowflake’s analytics power to the data — without surrendering control of it.https://kevinkeller.org/posts/nanocortex-blueprint-snowflake-cortex-agents/Mon, 16 Mar 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/nanocortex-blueprint-snowflake-cortex-agents/How a 1,600-line Python file can teach you everything about the Cortex Agent APIhttps://kevinkeller.org/posts/snowflake-oauth-pat-mcp-authentication-toolkit/Sun, 15 Mar 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-oauth-pat-mcp-authentication-toolkit/The core challenge of AI agents: passing the human user’s identity through to Snowflake. This toolkit demonstrates JWT-to-PAT token exchange so agents execute as the actual user — with their roles, permissions, and full audit trail.https://kevinkeller.org/posts/spcs-devcontainer-cloud-ide-snowflake/Sat, 14 Mar 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/spcs-devcontainer-cloud-ide-snowflake/Turn Snowflake Container Services into your personal cloud development environment — VS Code in the browser, web terminal, persistent storage, and direct Snowflake access.https://kevinkeller.org/posts/apache-nifi-snowflake-container-services/Fri, 13 Mar 2026 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/apache-nifi-snowflake-container-services/A patched, ready-to-deploy Apache NiFi 2.6.0 on SPCS — with fixes for ingress compatibility, a token debug UI, and a sample PostgreSQL-to-Snowflake CDC flow.https://kevinkeller.org/posts/snowflake-column-encryption-postgres-proxy/Fri, 20 Dec 2024 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-column-encryption-postgres-proxy/How to use Postgres 17 as a transparent encryption proxy so that data stored in Snowflake is always AES-256 encrypted at the column level — with your own key, under your own control.https://kevinkeller.org/posts/snowflake-pgp-decryption-mft-pipeline/Sat, 14 Dec 2024 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-pgp-decryption-mft-pipeline/How to decrypt PGP/GPG-encrypted files directly inside Snowflake using Python UDFs and the pgpy library — no external compute, no middleware, no key in transit.https://kevinkeller.org/posts/snowflake-ssh-tunnel-query-onprem-datalake/Tue, 10 Dec 2024 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-ssh-tunnel-query-onprem-datalake/Hybrid Cloud Architecture Series with Snowflake Part 1 — How to setup an SSH tunnel from Snowflake Container Services to query on-premise Iceberg data lakes, databases, APIs, or AI models behind your firewall.https://kevinkeller.org/posts/snowflake-format-preserving-encryption-python-camouflage/Fri, 15 Nov 2024 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-format-preserving-encryption-python-camouflage/Tokenize PII in Snowflake so that encrypted data still looks and behaves like real data — joinable, sortable, format-correct — all with your own AES-256 key, enforced through tag-based masking policies.https://kevinkeller.org/posts/opentelemetry-snowflake-observability-datalake/Sat, 09 Nov 2024 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/opentelemetry-snowflake-observability-datalake/Build your next generation security and observability Iceberg data lake by ingesting OpenTelemetry data directly into Snowflakehttps://kevinkeller.org/posts/snowflake-siem-xdr-automated-security-incidents/Thu, 25 Jul 2024 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/posts/snowflake-siem-xdr-automated-security-incidents/A step-by-step guide to having Snowflake automatically detect failed login attempts and raise incidents in your SIEM or XDR — no external code required.https://kevinkeller.org/playground-ai-embeddings/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-ai-embeddings/https://kevinkeller.org/playground-ai-code/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-ai-code/A Claude Code-like experience in your browser — Monaco editor with AI-powered completions, chat, and Python execution. All local via WebGPU.https://kevinkeller.org/chat/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/chat/Ask questions about any article — powered by AI running entirely in your browser.https://kevinkeller.org/contact/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/contact/https://kevinkeller.org/playground-crypto/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-crypto/Practice encryption, key pairs, JWTs, and hashing — all running in your browser via WebAssembly. No server, no setup.https://kevinkeller.org/daily/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/daily/https://kevinkeller.org/playground-datalab/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-datalab/DuckDB SQL + Python + Local AI in one browser-based data analysis environment. Upload CSV/Parquet/JSON, query with SQL, analyze with pandas, ask AI about your data — all running locally.https://kevinkeller.org/playground-devicecode/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-devicecode/Experience the OAuth 2.0 Device Authorization Grant (RFC 8628) interactively. Request device codes, authenticate at a verification URL, and receive JWTs with optional Snowflake-compatible claims.https://kevinkeller.org/playground-devicecode-verify/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-devicecode-verify/Authenticate a device code request — enter the code shown on your device, choose a username, and grant access.https://kevinkeller.org/playground-encryption-pipeline/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-encryption-pipeline/Chain cryptographic operations visually — generate keys, encrypt with AES-GCM, sign with RSA, wrap in JWT, base64 encode. Each step shows input/output in real time. All client-side via Web Crypto API.https://kevinkeller.org/events/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/events/https://kevinkeller.org/playground-excalidraw/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-excalidraw/https://kevinkeller.org/finds/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/finds/https://kevinkeller.org/playground/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground/https://kevinkeller.org/playground-jupyter/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-jupyter/https://kevinkeller.org/playground-jwt/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-jwt/https://kevinkeller.org/playground-futurecoder/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-futurecoder/Interactive Python course running in your browser — learn from scratch with hands-on exercises. Powered by futurecoder (open source, MIT license).https://kevinkeller.org/learning/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/learning/https://kevinkeller.org/links/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/links/https://kevinkeller.org/playground-marimo/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-marimo/https://kevinkeller.org/playground-oidc-flow/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-oidc-flow/Step-by-step simulator for the OpenID Connect Authorization Code Flow — real JWTs, real HTTP request shapes, configurable IdP parameters. Runs entirely in your browser.https://kevinkeller.org/personal/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/personal/https://kevinkeller.org/playground-connstr/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-connstr/https://kevinkeller.org/playground-explain/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-explain/https://kevinkeller.org/playground-postgres/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-postgres/https://kevinkeller.org/privacy/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/privacy/https://kevinkeller.org/py-corner/editor/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/py-corner/editor/https://kevinkeller.org/py-corner/view/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/py-corner/view/https://kevinkeller.org/playground-pygame/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-pygame/https://kevinkeller.org/playground-pyscript/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-pyscript/https://kevinkeller.org/playground-streamlit/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-streamlit/https://kevinkeller.org/playground-python/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-python/https://kevinkeller.org/playground-rbac/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-rbac/Visualize Snowflake role hierarchies and privileges interactively. Define roles, grants, and users — see the hierarchy as a graph, click to inspect effective permissions, and generate SQL.https://kevinkeller.org/resume/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/resume/https://kevinkeller.org/playground-slingcode/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-slingcode/A personal computing platform in a single HTML file. Build and run web apps entirely in your browser — HTML, CSS, JavaScript. No server, no build tools, no accounts.https://kevinkeller.org/playground-snowflake-entitlements-demo/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-snowflake-entitlements-demo/Hidden demo: simulate step-up authentication, then grant a 30-second Snowflake PII entitlement window.https://kevinkeller.org/playground-oauth-generator/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-oauth-generator/Generate a complete Snowflake External OAuth setup — RSA key pair, security integration SQL, token generator UDF, MCP server, and RBAC grants. All in your browser.https://kevinkeller.org/playground-snowflake-report/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-snowflake-report/Build Streamlit dashboards against your Snowflake account using External OAuth — SQL API queries, charts, and tables, all in your browser.https://kevinkeller.org/playground-sql/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-sql/https://kevinkeller.org/subscribe/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/subscribe/https://kevinkeller.org/playground-tiddlywiki/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-tiddlywiki/A non-linear personal notebook — capture, organize, and share ideas in a single-page wiki that runs in your browser. Create tiddlers, link them, build your own knowledge base.https://kevinkeller.org/playground-x86/Mon, 01 Jan 0001 00:00:00 +0000kellerkev@gmail.com (Kevin Keller)https://kevinkeller.org/playground-x86/Run real operating systems in your browser — Linux, BSD, Android, Windows, and 60+ more. Full x86 emulation via v86 WebAssembly. No installs, no server, nothing leaves your machine.