SecurityGovernance
AI Agent Guardrails: Tool Gate, Audit Log, Token Budget
AI agent guardrails with open source agentgateway: a per-role tool allowlist, audit log and token budget that stop a prompt injection, all run locally.
17 min read
Blog
Insights on software architecture, technology leadership, and engineering excellence
GovernanceArchitecture Practices
Agentic AI Architecture Framework: Autonomy Per Use Case
The Agentic AI Architecture Framework gives you three tiers. Build the Foundation once, then let each use case earn autonomy through evidence and impact.
9 min read
SecurityAPI Design
Token Exchange at the API Gateway: RFC 8693 in Practice
OAuth token exchange (RFC 8693) lets your API gateway hand the producer a token that still carries the user, so RBAC keeps working. Hands-on with Keycloak.
15 min read
Architecture PracticesDocumentation
Wardley Mapping: Build vs Buy Decisions as Code
Wardley Mapping turns build vs buy debates into a reviewable text file. Draw a Wardley map as code, mark what blocks change, and keep it beside your ADRs.
11 min read
Design PatternsData Management
Eventual Consistency in DDD: Measure the Window with Sagas
Eventual consistency in DDD works when the inconsistency window is a business number. Build a .NET saga with outbox and idempotent consumers, then alert on it.
13 min read
SecurityCloud & Infrastructure
Post-Quantum Cryptography: The TLS Inventory to Run Now
Post-quantum cryptography migration can't wait for quantum computers. Run this 20-minute OpenSSL check on your own TLS endpoints today.
11 min read
ResilienceDevOps
Chaos Engineering: Break Things on Purpose With Chaos Mesh
Chaos engineering means breaking systems on purpose to test failure predictions. Here is a real Chaos Mesh walkthrough on a local kind cluster.
14 min read
Quality & TestingGovernance
Accessibility Testing: What axe-core Cannot See
Axe-core catches about 57% of accessibility issues by one count. Here is what it cannot see, and who should own the rest.
18 min read
Organizational DesignArchitecture Practices
Organizational Understanding: Why Capabilities Go Unused
Organizational understanding decides whether a capability lands. The technology ships and works, but the organization never adapts, so it sits unused.
8 min read