Blog
Agent knowledge is a trigger problem, not a writing problem
I put everything the agent needed into an MCP resource and it never got read. The four channels for teaching an agent your framework are not four kinds of content. They are four trigger conditions, each with a different price.
Democratizing professional cloud infrastructure
The cloud the serious companies use is closer than you think. Vibe coding gets you a prototype and drops you at the edge of the hard part. Here is what closed the gap between something that runs on your machine and something deployed, secure, on real infrastructure.
IaC, FdI, IaF: three ways a codebase becomes infrastructure
Frameworks defining infrastructure is suddenly a live idea, and the terms are blurring. Here is a clean taxonomy of the three approaches and what each one trades away.
Agentic loops don't fix lying agents
Loop engineering is the current answer to unreliable coding agents. But a loop is only as good as its verifier, and I have the receipts for what slips through.
Getting a production WAF out of Azure Front Door Standard
Front Door Standard caps a WAF at 100 custom rules for $35 a month. What that covers, and when Premium's $330 tier earns the extra $295.
Cloud Run private networking without a VPC Connector
Direct VPC Egress + Cloud DNS + Private Google Access gets you internal service-to-service calls on Cloud Run for ~$0.20/month instead of $14-30.
MCP annotations are a UX layer, not a security layer
Tool annotations like readOnlyHint are server-declared hints, not enforcement. Treating them as permissions is a category error the spec warns against.
Migrating off AWS App Runner before the April 30 deadline
AWS is closing App Runner to new customers on April 30, 2026. Notes from a production Next.js migration to standard ECS Fargate, and why I skipped Express Mode.
I built a TypeScript framework that generates your entire cloud infrastructure
tsdevstack generates Terraform, Docker, Kong routes, CI/CD, secrets, and observability across GCP, AWS, and Azure from one TypeScript config.
Infrastructure as Framework: A New Abstraction for Cloud Deployment
A new abstraction between Infrastructure as Code and PaaS. One TypeScript config that deploys to GCP, AWS, or Azure without rewriting.