The ports tree, ZFS, jails, pf, and the internals of a Unix built for correctness.
How kqueue registrations, filters, receipts, one-shot and edge-like behavior, descriptor lifetime, signals, timers, and process events actually work.
How FreeBSD's TrustedBSD MAC framework composes policy modules, labels and access checks, plus a safe path for selecting, testing, and auditing policy.
A practical model of netgraph nodes, hooks, control messages, data paths, ngctl inspection, socket integration, and safe teardown on FreeBSD.
How UFS Soft Updates, SU+J, fsck, and GEOM journaling differ, including crash guarantees, stable-write semantics, inspection, and safe changes.
A recovery-oriented ZFS replication workflow covering recursive snapshots, incremental ancestry, receive safety, resumable streams, holds, and audits.
How to design a FreeBSD service around Capsicum descriptor rights, capability mode, process descriptors, and delegated Casper services.
A layered bhyve UEFI diagnostic for firmware paths, VNC output, NVRAM state, EFI partitions, virtual disks, drivers, and stale VMs.
How to distinguish damaged GPT metadata from missing BIOS or EFI boot code, recover safely from the backup table, and verify every write.
How to correlate FreeBSD link events, counters, negotiated media, switch logs, optics, driver messages, and EEE before changing anything.
How to verify FreeBSD dump capture, preserve vmcore evidence, match kernel symbols, read crashinfo and kgdb traces, and report a panic.