Cost Discipline.
The money this infrastructure didn't spend, in one URL. I built it as the link to drop in a consulting reply or cover letter. Every row quotes its source line and links to the proof. The dated ledger post that started this record lives at /blog/infrastructure-receipts-ledger.
~/guides/never-spent
~$2,500/YR · OWNER-REPORTED ESTIMATE · UNVERIFIED
Proprietary VPN hardware support + licensing, eliminated
Cyberoam out, Tailscale on commodity hardware. The case quotes it directly: "roughly $2,500/year effectively eliminated." Figures as of 2024.
$2,000/MO QUOTE → $20/MO DROPLET · MEASURED
Shopify Plus seat replaced by a self-hosted droplet
I ruled out a $2,000/month seat and ran it on a $20/month VPS instead. Roughly 1% of the SaaS cost, and it held under lockdown traffic.
~/guides/deleted
$20/MO → $0 · $64.20 BILL CLOSED · MEASURED
Vercel KV instance deleted
Per-process sliding window on the fast path, durable counters to Postgres. The month-by-month bill table totals $64.20.
FRAMEWORK · RIGHT-SIZING · LESSON 3
The decision framework behind the savings
Buy for where you are, price the operational overhead, keep the exit open. Three rules from the decade post, applied every time since.
~/guides/zero-by-design
$0 ONGOING · OFFICE DESKTOP · MEASURED SHAPE
Forecasting pipeline with no server and no cloud bill
It parses on existing office desktop hardware. Python, SQLite, and Prophet are all free, per the forecasting case.
$0 BEYOND DOMAIN · FREE TIERS · NO EGRESS BILL
TweakDeals stack on free and launch tiers
Workers, Neon, R2, plus the domain. Free and launch tiers throughout, with no per-request egress bill.
$0 INCREMENTAL · FREE TIER + FREE CERTS
RDS cutover with flat cost
I did the RDS cutover at flat cost. Twingate's free tier covers the connectors, Let's Encrypt is free, and the VM rides the existing Hyper-V host.
ORIGIN · DATED POST · STAYS LIVE
The receipts ledger post
The 2026-10-11 post this hub grew from. Still live, with a canonical note pointing here.
~/guides/honest-limits
No audited financials. Build logs with bill tables and owner-reported figures, not an accountant's statement. Each claim links to its evidence grade.
Time-bounded. The VPN figure is as of 2024, the droplet math spans 2020–2023, the KV teardown is 2026. A snapshot with dates. Never a standing quote.
No grand total. Annual capex avoided plus monthly deltas plus zeros-by-design is arithmetic, not accounting. The honest figure is per-row, each with its receipt.
~/guides/next-step
Cost discipline is the companion to the Zero Trust record.
The cutover that restored ERP access over a weekend, with flat cost, is the Zero Trust guide. Or start a migration of your own via the intake checklist.