Engineering essays from the bench.
War stories, architecture decisions, and the occasional tirade. Written by the engineers who shipped it.
Your AI Gateway Is the New Crown Jewel: LiteLLM's 2026
LiteLLM's poisoned PyPI releases, a pre-auth SQL injection and an MCP command injection, both in CISA KEV. What to check, rotate and lock down.
How to Find Unused Cloud Permissions in AWS, Azure and GCP
Find unused roles, keys and permissions in AWS, Azure and GCP with native tools, merge them into one report, and remove access without breaking production.
Your CI Runner Is the Target: The TanStack and AntV npm Attacks
TanStack packages shipped with valid provenance from a poisoned CI cache. What the May 2026 npm attacks mean for your GitHub Actions setup.
AI Agent Identity on AWS, Azure and GCP: What to Use
Entra Agent ID, Google Cloud Agent Identity and AgentCore Identity compared: credentials, on-behalf-of flows, sponsors, and when a service account fits.
LMDeploy CVE-2026-33626: Your Image URL Field Is an SSRF Endpoint
An LMDeploy image loader SSRF was exploited 12.5 hours after disclosure. How to lock down any LLM endpoint that fetches user URLs, with tested Python.
az ad app list: Filter App Registrations by createdDateTime
Working az ad app list commands to filter, sort and export Entra app registrations by createdDateTime, why you only get 100, and when you need az rest.
Axios npm Supply Chain Attack: How It Works and How to Respond
How the March 2026 Axios npm attack compromised a 100M-download package to deploy a cross-platform RAT, plus detection and remediation steps.
Platform Engineering: Internal Developer Platforms That Get Adopted
Building internal developer platforms: golden paths, self-service infrastructure, Backstage, Crossplane, and how to measure platform success.
Just-in-Time Admin Access Across AWS, Azure and GCP
Replace standing cloud admin with time-bound access: Entra PIM, Google Cloud PAM and AWS Identity Center with TEAM, plus break-glass and access reviews.
Model Context Protocol (MCP): Building AI Integrations That Scale
Build MCP servers and clients, connect AI agents to enterprise tools, and deploy Model Context Protocol in production with security and observability.
