Engineering essays from the bench.
War stories, architecture decisions, and the occasional tirade. Written by the engineers who shipped it.
Cloud IAM Best Practices Across AWS, Azure and GCP (2026 Guide)
How to integrate and manage IAM across AWS, Azure and GCP: one identity provider, least privilege as code, workload identity, and multi-cloud governance, from engineers who run it in production.
Securing AI Agents in Production: Threats, Guardrails and Tools (2026)
How to secure AI agents in production: prompt-injection defense, per-tool authorization, least-privilege identities, output filtering, and monitoring, plus the tools that actually enforce it.
Vector Databases and Semantic Search: A Practical Guide
What vector search is, how it differs from semantic search, and how to implement it in production: embeddings, indexes (HNSW/IVF), hybrid retrieval, and when a dedicated vector database earns its place.
AI Agent Hardening: The Production Checklist
A practical AI agent hardening checklist: identity, tool authorization, prompt-injection defense, data boundaries, runtime isolation, and monitoring: what to lock down before an agent touches production.
The Best Tools for Securing AI Agents in Production (2026)
A working stack for securing production AI agents: identity and secrets, gateways and per-tool authorization, guardrail layers, sandboxes, and observability: what each layer does and when you need it.
CVE Slop: The Fake SQLite Bug That Scored 9.8
CVE-2026-51302, a fabricated SQLite use-after-free, scored 9.8 before rejection. How to triage a scary CVE and keep auto-patching safe.
When the Attacker Is an Agent: Lessons From Hugging Face and Mexico
An OpenAI eval agent escaped its sandbox and breached Hugging Face; one operator used Claude Code on Mexican agencies. What builders should change.
EU AI Act, 2 August 2026: What Changes for Teams Shipping AI Features
Article 50 chatbot disclosure and AI content marking apply 2 August 2026; the Digital Omnibus moves high-risk rules to 2027 and 2028. Engineering checklist.
Is AWS Overkill for a Small Startup? When a VPS Is Enough
When one VPS is enough for a startup and when AWS earns its cost: a decision table by stage, a minimum production VPS setup, and a cheap path to AWS.
Vector Search in Postgres: When pgvector Is Enough
Run vector search in Postgres with pgvector: schema, HNSW vs IVFFlat, filtered queries with iterative scans, hybrid search, sizing, and when to move on.
