Notes from the studio

What we've
been thinking about.

Writing on operations software, institutional design, the unfashionable parts of the stack, and what we're learning building things that have to last. New posts roughly fortnightly.

Filter by
Operations

Re-keying: the most expensive habit in operations.

Typing the same fact into three systems is the clearest sign that you do not have a central record. The four costs, where the habit comes from, and how to retire it in priority order.

HCOMS05 / 26
Reporting

When two systems disagree about the same fact.

Two systems return different answers to the same question. There are only three reasons that happens, and only one of them is a data problem. The investigation, in order.

HCOMS05 / 26
Operations

The shadow spreadsheet problem.

Every team that has invested in a proper system also has a shadow spreadsheet. The four reasons they appear, what each one is telling you, and how to absorb them without insulting the team.

HCOMS05 / 26
Operations

One record, one place: what single source of truth actually means in practice.

Single source of truth is easy to agree with and hard to implement. A practical guide to the ownership map, the conversation it forces, and what changes when it is in place.

HCOMS05 / 26
Compliance

Eight property compliance cycles every UK landlord must track.

A house under a tenancy in 2026 sits inside eight separate compliance cycles. Here is the actual list, with cadence and what fails when one slips.

HCOMS05 / 26
Compliance

Gas safety records: what passes, what fails, and what to evidence.

CP12 basics, the failure codes that catch landlords out, and the chain of evidence the tribunal will want to see.

HCOMS04 / 26
AI

AI for charities, dioceses and the third sector: where it actually helps.

A practical, low-risk guide to where generative AI genuinely saves time for charities and faith-based organisations — and the four uses we tell clients to avoid.

HCOMS04 / 26
Excel

When Excel is the right tool — and when it really isn't.

A balanced look at what Excel does brilliantly, what it does badly, and the four warning signs that you've crossed the line from "useful spreadsheet" into "fragile critical-path system you can't afford".

HCOMS04 / 26
Compliance

The hidden cost of an expired EPC.

EPCs feel like paperwork. Until one expires. Then they become the reason you cannot let, cannot evict, and cannot remortgage.

HCOMS04 / 26
Excel

The hidden cost of Excel: where the time actually goes.

A worked example of where the hours go when a small team runs on spreadsheets — and why "but Excel is free" is the most expensive sentence in operations.

HCOMS04 / 26
AI

Embedding an AI assistant inside software people actually use.

Six lessons from shipping a role-scoped, audit-trailed LLM assistant inside production diocesan software — what worked, what we ripped out, and what regulated buyers actually ask about.

HCOMS04 / 26
Compliance

Fire risk assessments after the Building Safety Act.

PAS 79, the responsible person, the post-Grenfell expectation, and what an FRA actually has to record in 2026.

HCOMS04 / 26
Excel

Migrating off Excel without losing the bits that worked.

A practical sequence for moving from a critical spreadsheet to a proper database-backed system — with the four ways teams get this wrong, and the one rule that prevents most of them.

HCOMS04 / 26
Tenancy

The Renters' Rights Bill: what landlords need to track from day one.

Periodic tenancies, decent home standard, possession grounds, the database. Five things a landlord's system needs to do that it almost certainly does not do today.

HCOMS04 / 26
AI

AI-assisted coding: an honest take after a year of using it properly.

Twelve months in, here's what AI coding tools genuinely changed for our team — what got faster, what got slower, and the four anti-patterns we tell new joiners to avoid on day one.

HCOMS04 / 26
SEO

SEO without the snake oil.

The eight things that actually move the needle on a small business website's search ranking — and the dozen that don't. A practical, jargon-free guide.

HCOMS04 / 26
Tenancy

Section 21 is going. The workflow that replaces it..

No-fault evictions are out. The replacement is a grounds-based possession workflow that is genuinely more administrative work, with more defensible outcomes.

HCOMS03 / 26
AI

The data-governance question every business should answer before deploying AI.

Where does the data go, who trains on it, and what does the audit trail look like? The five questions to put to any AI vendor before you sign — and the answers that should be deal-breakers.

HCOMS03 / 26
Reporting

Why dashboards lie, and how to build reports that survive scrutiny.

A dashboard reflects whatever its query last returned. A report tells you what was true on a date. Treating them as the same thing is the most expensive reporting mistake in operations.

HCOMS03 / 26
AI

Ryan Dahl on AI: why JavaScript will win the agent runtime war.

The creator of Node.js and Deno has been arguing that JavaScript — not Python — will be the language of AI agents. Here's the case he's making, and what it means for the businesses building with these tools today.

HCOMS03 / 26
Reporting

Three reports every operations director should have on Monday morning.

Most operations teams produce twenty reports nobody reads. The three that actually matter, what they should contain, and why everything else is noise.

HCOMS03 / 26
Operations

When five SaaS tools cost more than one custom system.

The hidden integration tax, the data-fragmentation cost, and the point where the SaaS stack genuinely becomes more expensive than building.

HCOMS03 / 26
Server

Increasing the PHP memory limit.

Four ways to raise the PHP memory_limit setting — php.ini, .user.ini, .htaccess, and ini_set() — and how to pick the right one for your hosting setup.

HCOMS03 / 26
Server

Redirecting www to non-www (or the other way) with .htaccess.

The cleanest .htaccess rules for forcing your site to a single canonical hostname — www-to-non-www and non-www-to-www, with HTTPS.

HCOMS03 / 26
Operations

Documentation as a feature, not a deliverable.

Software documentation rots because nobody owns it after sign-off. Treating it as a deliverable guarantees decay; treating it as a feature is the only thing that does not.

HCOMS02 / 26
WordPress

Resetting a WordPress password via MySQL.

When you can't get the email reset to work, here's how to set a WordPress admin password directly in the database — and why doing it right matters.

HCOMS02 / 26
Database

MySQL statements you'll come back to.

A practical reference of the MySQL statements you'll write again and again — SELECT, JOIN, GROUP BY, indexes, and the gotchas that catch people out.

HCOMS02 / 26
SEO

Verifying a site in Google Search Console.

The four ways to verify a site in Google Search Console, which one to use when, and the three reports worth checking weekly afterwards.

HCOMS01 / 26
Analytics

Setting up Google Analytics 4 (without breaking your privacy story).

A short, opinionated guide to installing GA4 on a UK site in 2026 — what to track, what to switch off, and what to use instead if you'd rather not.

HCOMS01 / 26
WordPress

What a WordPress theme is, and what to look for.

A clear-eyed explanation of WordPress themes — what they are, how they relate to plugins, when to buy vs build, and the four red flags that should put you off a theme.

HCOMS12 / 25
Opinion

When WordPress is still the right choice (and when it isn't).

An honest look at where WordPress still wins in 2026, where it doesn't, and the four alternatives we reach for when it's the wrong tool.

HCOMS12 / 25
CSS

Sensible font sizing in CSS — rem, clamp, and fluid type.

A practical guide to font sizing in modern CSS — why rem beats px, how clamp() lets you write a single fluid scale, and the type-system pattern we use on every site.

HCOMS11 / 25
CSS

Centring things in CSS in 2026.

The four ways to centre an element in CSS, when to use each, and the modern one-liners that have replaced the hacks of 2014.

HCOMS11 / 25
SEO

Google's disavow tool — when to use it (and when not to).

The disavow tool is one of the most misused features in Google Search Console. Here's what it does, when it actually helps, and when you should leave it well alone.

HCOMS10 / 25
PHP

Getting the visitor's IP address in PHP — and why it's harder than it looks.

The right way to get a visitor's IP address in PHP when your site sits behind Cloudflare, a load balancer, or any reverse proxy — and the spoofing risks of doing it wrong.

HCOMS10 / 25