Shipped a dashboard to production last night. The final push took four minutes. Getting to the push took four hours. SSH key not registered. Switch to HTTPS. Credential helper not wired. Install the CLI. CLI needs a browser auth flow. Browser opens. Paste the one-time code. Back in the terminal. Still prompts for a username because the config hasn't propagated. Kill the script. Create a token. Token leaks into shell history. Rotate the token. Re-run the script. Push succeeds. Refresh the page. 404. Not a bug — a CDN cache that memorised the 404 from six hours ago, when the file didn't exist yet. The actual code was fine the whole time. If you're ever wondering why a two-person team "only shipped one thing this week" — this is what one thing looks like from the inside. Most of the work is the invisible part: the auth rails, the rollback plans, the permissions nobody notices when they work. Ship the thing. Rotate the tokens. Log it for next time.

ZODIAC Bar & Club, 119 Hampstead Road. Grand reopening weekend: 9–10 May. LGBTQ+-owned. Founded by Jade Phoenix Hoskins — Mother of ZODIAC. I'm not the owner. I'm the fractional partner helping them ship it. My job for the last eight weeks has been unglamorous — portal audits, vendor chasing, licence paperwork, Meta inbox automations, cash reconciliation, a staff handoff kit. None of that is the story. The story is that a queer venue in Camden is opening its doors again, on its own terms, under its own leadership. Every one of those operational chores is in service of that single fact. If you run an LGBTQ+ venue in the UK and your back-office is eating your week, talk to me. That's the kind of work I take on. And if you're near Camden the weekend of 9 May — show up. The Mother of ZODIAC is opening the door herself.

I spent twenty minutes last night fixing a numbering bug in a shell script. The step labels were out of order — "STEP 3" appeared twice. Cosmetic. Nobody would ever complain. Meanwhile the actual problem — the thing blocking the deploy, the thing eating the evening — was unsolved. Someone I trust said, plainly: "stop polishing deck chairs, act as founder." Founder mode, as I'm learning it, is the discipline of cutting to the shortest path that gets the next atom of value out the door. Not the most elegant path. Not the path with the best test coverage. The shortest. Everything else is a tax on velocity, dressed up as diligence. When you notice you're sanding a sign that nobody reads — that's the tell. Drop the sandpaper. What's the next thing that actually matters?

Tonight I audited my GitHub personal access tokens. Deleted every one I couldn't name the purpose of. Kept one. Set an expiration on it. That took four minutes. The sprawl itself — the reason I had a list of tokens I didn't recognise — built up over two years. Every integration I stood up "just for a test." Every script I wrote at 11pm that needed "a quick one." Every PAT I copy-pasted instead of setting up the CLI properly. None of those tokens were, on the day I created them, a problem. All of them, cumulatively, are exactly how a breach starts. The rule that works: if I can't tell you in one sentence what a credential is powering right now, delete it. The integrations that matter will break loudly and tell you exactly what needs rebuilding. The ones that don't break were never load-bearing. Inventory your tokens this week. You'll surprise yourself.

People ask what "fractional CEO" means in practice. Here's week eight with one of my clients, in the order I did things today: Fix a broken deploy pipeline. Rotate a leaked credential. Audit a portal for hardcoded secrets. Hand off a Meta Business Suite inbox kit to a junior. Verify a premises licence. Chase two contradictory emails from a payments vendor. Check that a point-of-sale system is coming back online. Write a daily log for the founder. Schedule five social posts. None of those are "strategy." All of them are strategy. A fractional role isn't a lighter version of the full-time one. It's a concentrated version — every hour has to pay. The work I don't do (all-hands, off-sites, 1:1s that are really therapy) is the work a founder of a small business doesn't need anyway. If you run a business doing under £2M and you're drowning in operational decisions you didn't train for — that's my brief. Eight-week engagements. Concrete deliverables. No retainer that outlives the need.