Engineering essays from the bench.
War stories, architecture decisions, and the occasional tirade. Written by the engineers who shipped it.
Technical Due Diligence Checklist for Startup Fundraising
What investors check in technical due diligence, the documents to put in the data room, red flags that stall a round, and a 30-day plan to prepare.
DevSecOps Pipeline: How to Add Security to CI/CD
How to build a DevSecOps pipeline: which scans run where, what should block a merge, a working GitHub Actions example, and how to secure the CI runner itself.
GitHub Actions CI/CD: Building a Secure Production Pipeline
A complete GitHub Actions CI/CD pipeline: SHA-pinned actions, OIDC cloud auth, caching, environments, attestations, and the failure modes that bite teams.
Edge AI: Running ML Models on IoT Devices
Deploying ML on edge and IoT devices: model optimization, hardware selection, TensorFlow Lite, and real-world constraints.
Cloud Migration Strategies: The 7 Rs and How to Choose
Choose a cloud migration strategy per workload: the 7 Rs compared, a decision flow, dependency mapping, a wave plan and a low-downtime database cutover.
Ransomware Prevention Guide: Controls, Backups and Recovery
How to prevent ransomware and survive it: close the common entry points, limit spread, detect early, and keep immutable backups you have actually restored.
Testing Strategy for Modern Web Apps: What to Test Where
A practical testing strategy for web apps: unit, component, integration and Playwright end-to-end tests, what each layer covers, and fixing flaky tests.
Startup Infrastructure Checklist: Zero to Production
A phased startup infrastructure checklist: accounts and access, CI/CD, hosting, backups, observability, security and on-call, with configs to copy.
Serverless Architecture Patterns for Event-Driven Apps
Production serverless patterns: SQS load leveling, EventBridge choreography, Step Functions sagas, the outbox, plus idempotency and failure handling.
How to Build an Offline-First Progressive Web App
Build an offline-first PWA that holds up in production: manifest and install, service worker updates, caching strategies, offline sync, push, iOS limits.
