diff --git a/static/_headers b/static/_headers
index e0f0d90..6d609cf 100644
--- a/static/_headers
+++ b/static/_headers
@@ -3,6 +3,7 @@
   X-Frame-Options: DENY
   X-XSS-Protection: 1; mode=block
   X-Clacks-Overhead: GNU Terry Pratchet
-  Content-Security-Policy: default-src 'self'; script-src 'self'; connect-src 'self'; img-src https:
+  X-Clacks-Overhead: GNU Joe Armstrong
+  Content-Security-Policy: default-src 'self'; script-src 'self'; connect-src 'self'; img-src 'self'; frame-src 'none'; frame-ancestors 'none'; form-action 'none'; base-uri 'self';
   Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=()
-  Referrer-Policy: no-referrer-when-downgrade
+  Referrer-Policy: strict-origin-when-cross-origin
diff --git a/templates/shortcodes/cv.md b/templates/shortcodes/cv.md
index 0878503..f3df6cd 100644
--- a/templates/shortcodes/cv.md
+++ b/templates/shortcodes/cv.md
@@ -18,32 +18,67 @@ Twitter:
 
 ## Experience
 
-- Supabase - 2023-2025
-    + Logflare - logs aggregation service
-    + Supavisor - a cloud-native, multi-tenant Postgres connection pooler
 - Hauleth.dev - Consultant - 2021+
+    + DockYard/Karambit.ai - 2025
+        * Architectural analysis of Karambit product
+        * Prepared security analysis with detailed report with fixes
     + Eiger - 2022-2023
         * Forte.io
-            - Implementation of the Interledger protocol for cross-chain transactions
+            - Implemented Interledger protocol for cross-chain transactions
         * Aleo Blockchain
-            - Implementation of the GraphQL API for the on-chain data
-    + Erlang Solutions/Kloeckner GmbH - 2021 - Consultant for Elixir, Ruby, and SQL (PostgreSQL)
-        * Substantial query performance optimisations by optimising PostgreSQL indices
-- Remote Inc. - Senior Backend Engineer - 2020-2021
-- Kobil GmbH - Erlang/Elixir Developer - 2019-2020
-    + Maintaining MongoDB driver for Elixir
-    + Implemented transactions for MongoDB driver in Elixir
+            - Implemented GraphQL API for the on-chain data
+            - Created syntax colouring library for Aleo assembly-like language
+              for smart contracts
+    + Erlang Solutions/Kloeckner GmbH - 2021 - Consultant for Elixir, Ruby,
+      and SQL (PostgreSQL)
+        * Optimised DB query performance by providing PostgreSQL structure
+          analysis and improving indices usage
+    + Remote Inc. - Senior Backend Engineer - 2020-2021
+        * Architectural analysis of existing codebase
+    + Kobil GmbH - Erlang/Elixir Developer - 2019-2020
+        * Maintained MongoDB driver for Elixir
+        * Implemented transactions for MongoDB driver in Elixir
+- Supabase - 2023-2025
+    + Logflare - logs aggregation service:
+        * Implemented on-the-fly decompression of incoming data that improved
+          ingestion possibilities and reduced transfer usage (created library
+          [`plug_caisson`][] for that purpose)
+        * Implemented DataDog-compatible ingestion endpoint for seamless
+          transition from DataDog provider to Logflare
+        * Improved BigQuery pipeline workflow to reduce congestion on database
+          connections
+        * Added support for AWS Cloud Events metadata extraction
+        * Improved CI usage by splitting different actions to separate steps ran
+          in parallel
+        * Replaced dynamic generation of connection modules for PostgreSQL
+          storage system with Ecto's dynamic repositories to avoid atom exhaustion
+    + Supavisor - a cloud-native, multi-tenant Postgres connection pooler
+        * Deployment management
+        * Optimised metrics gathering system that resulted in an order of
+          magnitude performance boost
+        * Updated used OTP and Elixir versions from OTP 24 to OTP 27 and Elixir
+          from 1.14 to 1.18
+        * Reduced usage of mocking in tests to improve tests performance and
+          volatility, resulting in reduced CI usage and improved developer
+          experience
+        * Implemented e2e tests against existing Node.js PostgreSQL clients to
+          improve production issues
+        * Implemented multi-region deployment system to provide blue/green
+          deployments
+        * Improved system observability features by making it more resilient and
+          performant
+        * Replaced usage of `ct_slave` with newer `peer` module in OTP
 - AppUnite - Full-stack Developer/DevOps - 2016-2019:
     + JaFolders/AlleFolders
         * 2x performance improvement by optimising PostgreSQL usage
         * Reduced geo-queries using PostGIS thanks to better indices and
-        materialised views usage
-        * Implementation of the UI and brochure viewer in Vue and SVG
+          materialised views usage
+        * Implemented UI and brochure viewer in Vue and SVG
     + OneMedical/Helium Health
         * Architectural redesign of application from Rails/MongoDB to
-        Phoenix/PostgreSQL
-        * Preparing hybrid deployment with on-premise/in-cloud system
-        * Migration of the existing deployments from MongoDB to PostgreSQL
+          Phoenix/PostgreSQL
+        * Prepared hybrid deployment with on-premise/in-cloud system
+        * Migrated of the existing deployments from MongoDB to PostgreSQL
 - Nukomeet - Full-stack Developer - 2015-2016
 - Prograils - Junior Developer - 2013
 
@@ -147,3 +182,5 @@ Twitter:
 - Viking reenactor
 - Keyboard fan
 - Sci-fi/Fantasy fan and Poznań's Sci-fi/Fantasy club member
+
+[`plug_caisson`]: https://github.com/supabase/plug_caisson