Posts

Chesterton's Fence is quoted as a reason to leave old code alone. Read as a time-boxed debugging question, it says when to remove it and how to record the answer.

technical-debt · best-practices · documentation +3

Technically solid but stuck at one level? What engineering communication means as concrete artefacts, why ladders gate the next step on it, and where to start.

career · leadership · documentation +4

A Cognito passkey migration guide for SaaS teams on email, password, and SMS OTP: configuration, enrollment, and the four-tier recovery ladder that replaces SMS.

authentication · security · aws +2

A plan's job is to pre-decide what the agent would otherwise decide silently. The document skeleton that does it, traced through one shipped change.

claude-code · ai-agents · documentation +2

AI-assisted coding made generation cheap and verification heavy. Why CTOs should pace adoption to review capacity, and what to measure beyond velocity.

leadership · engineering-management · ai-adoption-strategy +3

Keep identity reads in DynamoDB, route arbitrary sort, filters, facets, and full text to a zero-ETL OpenSearch read model, and know when one PostgreSQL beats both.

dynamodb · aws · architecture +2

DynamoDB has no OFFSET, no arbitrary ORDER BY, and no cheap COUNT. Ship signed next/prev cursors, model sort orders as sort keys, and drop the total count.

dynamodb · aws · data-storage-orm +2

When a coding agent underperforms, the reflex is a stronger model. On bounded tasks the harness moves the score at least as much; a rule for which lever to pull.

ai-agents · ai-tools · llm +3

How AWS Dogwood adds temporal conditions to Cedar policies, lowers them back to plain Cedar, and enforces agent guardrails at the Amazon Bedrock AgentCore gateway.

authorization · security · ai-agents +2

Devcontainers, Codespaces and AWS Lambda MicroVMs as homes for a coding agent: what each rung adds, what it costs, and when moving the agent off the laptop pays off.

lambda · claude-code · ai-tools +5

A decision framework for the TypeScript data layer on Postgres: how much SQL the library should own, what it costs on Lambda, and when the default is wrong.

typescript · postgresql · data-storage-orm +1

Rushing feels fast but creates rework, bugs, and firefighting. Why pausing for refactoring, tests, and CI upkeep is an investment in speed, not lost speed.

technical-debt · testing · ci-cd +2

Stop asking who wrote the legacy code. Separate responsibility, accountability, and blame, and make inherited code owned rather than orphaned.

engineering-culture · leadership · team-management +3

Learn the mental shift behind event-driven systems: announce facts instead of issuing commands. Covers naming, decoupling, eventual consistency, and idempotency.

event-driven · messaging · idempotency +2

Before building an internal service layer, decide whether you need one: what it costs per call, the volume where VPC Lattice wins, and when direct invoke still beats it.

aws · aws-cdk · lambda +4

A private REST API structurally cannot carry gRPC, and every AWS surface that speaks gRPC excludes Lambda targets. What to keep from gRPC, and what to drop.

aws · aws-cdk · lambda +4

The private REST API, the resource policy that switches it on, per-route AWS_IAM grants, the two CDK stacks, and signing the call from a Node 22 Lambda.

aws · aws-cdk · lambda +4

SigV4 proves which service is calling and nothing about which user it is for. How to propagate a verified subject, and what the transport actually encrypts.

aws · aws-cdk · lambda +4

Same-account, the resource policy and the caller's identity policy are an OR. Cross-account they become an AND, and silence denies. What that changes in the perimeter.

aws · aws-cdk · lambda +4

API Gateway shares one throttle bucket with your front door, never retries a Lambda integration, and cannot see loops through itself. What you have to rebuild.

aws · aws-cdk · lambda +4

The access log already names the caller, route, and latency. Per-route metrics are not free, the user token needs masking, and AWS is switching off its own mesh.

aws · aws-cdk · lambda +4

A measured benchmark of 9 bundlers and 3 cdk synth runners for CDK TypeScript Lambdas, with a per-layer default and the rule that picks each one.

aws-cdk · lambda · typescript +3

Nub and Vite+ are both 2026 oxc-powered Rust toolchains that look like rivals but are not. A clear rule for which binary belongs in which repo.

javascript · typescript · vite +3

A lifecycle test for CDK stack layout: give a resource its own long-lived stack when it outlives any single deployer, then reach it by a well-known name.

aws-cdk · infrastructure-as-code · typescript +3

The exact IAM size, attach, and quota limits you will hit at scale, and the scoped-policy, permission-boundary, and SCP structure that keeps you far from every one.

aws · iam · security +2

Backstage looks like a quick install, but the recurring cost is a standing platform team. A leader's guide to deciding DIY Backstage versus a hosted IDP.

platform-engineering · developer-experience

Committing Bruno .bru files to the repo keeps the API contract in the same PR and history as the code. The only real tax is a deliberate secrets boundary.

testing · ci-cd · developer-experience +1

Kinesis is four AWS services under one name. A guide to the four, the Data Streams shard engine underneath, its cost shape, and when to pick something else.

aws · real-time · event-driven +1

A blameless postmortem model that fixes the system instead of finding a culprit, with a copy-paste template and where individual accountability still applies.

engineering-culture · incident-response · psychological-safety +4

The team documents a mature engineering team owns: onboarding, working agreements, Definition of Done, on-call, knowledge transfer, and what makes each one good.

engineering-culture · hiring · documentation +4

AppSync subscriptions fire only on mutations. This explores bridging downstream BFF events into a NONE-data-source mutation with EventBridge and CDK.

aws · graphql · serverless +4

Each git event deserves a different GitHub Actions job: what to run on push, pull_request, the merge queue, and tag/release, and why routing protects lead time.

ci-cd · github-actions · devops +1

Server-Driven UI is the mobile analog of server-side composition. The hard part is not JSON rendering but a versioned component contract that survives old app versions.

mobile · react-native · architecture

How high-performing teams shrink the lead time from code-complete to live in production, without trading away security or code quality. A guide for tech leads.

ci-cd · devops · dora-metrics +2

How high-performing teams keep security review from becoming a lead-time bottleneck: shift-left automation, risk-based gates, a paved road, dependency cadence.

ci-cd · devops · security +3

A mobile binary can't be rolled back and old versions linger, so safety and speed move server-side: a BFF, consumer-driven contracts, and backward-compatible versioning.

mobile · api-design · testing +1

Lambda durable functions put the orchestrator in your TypeScript. Reach for them when you own the whole workflow; keep Step Functions for cross-team state machines.

lambda · step-functions · serverless +1

How a frontend platform team makes the right way the easy way: golden-path scaffolding, versioned shared packages, and a task CLI that removes per-team drift.

platform-engineering · developer-experience · build-tools +1

A presentation service is the thin backend behind a UI fragment. Ports-and-adapters keeps it from rotting into glue code by pointing dependencies inward.

architecture · nodejs · typescript +3

Server-side micro-frontend composition lets independent teams own fragments of one page. The hard part is the ownership boundary and the versioned consistency contract.

build-tools · architecture · nextjs +2

Match architecture weight to each runtime's init-amortization: lean handlers on single-purpose Lambda, more on a Lambdalith, full OOP/DI only on long-lived runtimes.

architecture · lambda · serverless +3

A small, complete URL shortener on AWS Lambda and DynamoDB with Effect and SST v4, showing schema-at-the-boundary, layers, and tagged-error mapping.

functional-programming · lambda · typescript +2

How to slice AWS Lambda functions: default to single-purpose, treat the single-domain Lambdalith as an earned exception, and the platform forces that decide it.

lambda · serverless · architecture +2

AI absorbs more of the implementation, so the framework name matters less than four feedback loops. A decision lens for tuning flow, cadence, WIP, and review.

leadership · agile · team-management +3

Bake a single PII branded type into your observability API signatures so TypeScript rejects sensitive fields at the call site, before any runtime redactor sees them.

typescript · zod · observability +3

A handbook for the informal fast track: recognise the Solver role, codify its operating model before the role calcifies, and time it against the title-and-pay talk.

career · engineering-management · organizational-design +1

What Aurora Serverless v2 is under the hood: the shared storage layer, ACU-driven compute, the Caspian substrate, scale-to-zero, and mixed-mode clusters.

aws · data-storage-orm · architecture +1

Agents made code-writing essentially free, but judgment about when and how much to use them is still entirely yours. An Aristotelian frame to separate the two skills.

ai-tools · claude-code · ai-agents +3

Production deploys need a real approval gate: use GitHub Environments with native protection rules and scoped secrets, not workflow if: hacks or marketplace actions.

github-actions · ci-cd · devops +2

Building a RAG agent on AWS Bedrock + Knowledge Bases + OpenSearch Serverless with CDK in TypeScript: architecture, IAM wiring, automated ingestion, and the chat UI.

aws-bedrock · aws-cdk · rag +3

What a Bedrock Knowledge Base really is, which data sources and vector stores are first-class, and why the console default rarely fits a small corpus.

aws · aws-bedrock · rag +3

HMAC-SHA-256 for webhooks, signed URLs, and internal auth, with runnable code in three languages and the boundary where digital signatures take over.

security · encryption · webhooks +4

Named signals that justify a Kafka migration from a managed event bus, and a four-phase outbox-anchored playbook to move without rip-and-replace.

messaging · event-driven · aws +4

A CDK guide for deploying a minimal Strands agent on AgentCore Runtime: parameterized stack, arm64 build, deploy and invoke, with IAM and Marketplace prerequisites.

aws-bedrock · ai-agents · aws-cdk +3

A hardened, paste-ready setup for adding Anthropic's claude-code-action to a GitHub repo, with the security and cost knobs spelled out for production use.

claude · github-actions · code-review +3

DI containers, monolithic SDKs, god-handlers, top-level secret fetches, and heavy ORMs: what they cost on cold start, and the functional shape that replaces them.

lambda · typescript · serverless +2

An exploration of whether a Rust + WASM image-resize handler fits inside Cloudflare Workers' binary-size, memory, and CPU ceilings before the POC runs.

webassembly · cloudflare · rust +1

A stack-agnostic map of WebAssembly's three bets (browser performance, server-side WASI, edge compute) so you can tell which one a Wasm talk is about.

webassembly · edge-computing · architecture

A platform default for multi-team AWS orgs: one event, many consumers, each in its own account with its own SQS and DLQ, and fan-out in the event bus layer.

aws · eventbridge · event-driven +4

An exploration thesis: vendor lock-in in event-driven systems lives in the bus topology, not the runtime, and wasmCloud plus NATS make the bus portable.

webassembly · messaging · event-driven +3

One default shape for long-running work across a browser SPA and a mobile app, with the cases where it should be overridden.

api-design · real-time · webhooks +4

A practical repo layout that keeps Claude Code, Codex, Copilot, Cursor, and OpenCode reading the same rules, with honest notes on where portability breaks.

ai-tools · claude-code · github-copilot +3

A pragmatic guide for designers working with async backends: three interaction patterns, when to use each, and four anti-patterns to push back against.

event-driven · state-management · design-patterns +2

A practical introduction to idempotency for developers building APIs, payments, and message consumers, covering HTTP semantics, idempotency keys, and upserts.

idempotency · api-design · distributed-systems +4

An engineering guide to connecting ad clicks to paid subscriptions under SKAN 4, AdAttributionKit, and post-ATT privacy, with event taxonomy and reconciliation.

mobile · in-app-purchase · subscriptions +1

A decision framework for picking between RevenueCat, Adapty, Qonversion, Apphud, Chargebee, and Stripe Billing in 2026, with pricing math and DMA impact.

subscriptions · payment-systems · in-app-purchase

How Zapier MCP gives AI agents action-level whitelisting, credential isolation, and human-in-the-loop approval, a managed alternative to custom scoped proxies.

mcp · security · ai-agents +4

A practical guide to mobile in-app purchase rules, paywall patterns, and RevenueCat integration with server-side receipt validation and event-driven architecture.

in-app-purchase · subscriptions · mobile +1

How to build a reliable entitlement sync layer that keeps subscription access consistent across web, iOS, and Android with EventBridge and idempotent processing.

webhooks · idempotency · subscriptions +3

A practical comparison of payment providers for SaaS: Merchant of Record vs Payment Processor models, PSD2/SCA compliance, VAT, and a provider decision framework.

payment-systems · subscriptions · compliance

A practical guide to subscription state machines, proration strategies, dunning management, and fraud detection patterns with Stripe webhooks and AWS EventBridge.

subscriptions · payment-systems · security +1

Copying Claude Code configurations causes context window bloat, degraded tool selection, and mismatched workflows. Build setups intentionally with token budget math.

developer-experience · ai-tools · productivity +2

Build SaaS authorization with AWS Cognito and Verified Permissions, covering Cedar policies, multi-tenant patterns, JWT flow, and cost in TypeScript.

authorization · aws · authentication +4

A vendor-neutral evaluation of AWS Verified Permissions, SpiceDB, OpenFGA, Cerbos, and OPA, with architecture patterns, cost analysis, and a decision framework.

authorization · security · architecture +4

A deep comparison of Cedar, Rego, OpenFGA DSL, and Cerbos YAML/CEL policy languages: syntax, performance, formal verification, tooling, and TypeScript integration.

authorization · security · architecture +2

A deep technical comparison of SpiceDB and Auth0 FGA (OpenFGA), two Zanzibar-inspired systems with different trade-offs in schema, consistency, deployment, and scale.

authorization · security · architecture +3

A practical operational frame for triage, discovery, and prioritization when every channel shouts at once.

product-management · decision-making

Authentication vs authorization, common permission pitfalls, the fail-closed principle, and the goals every permission system should meet.

typescript · nextjs · authorization +2

Refactor scattered permission checks into a centralized service layer, add Next.js middleware guards, and build a defense-in-depth authorization architecture.

typescript · nextjs · authorization +2

Build a type-safe RBAC system in TypeScript, create a unified can() function, sync permissions across UI and backend, and learn when RBAC reaches its limits.

typescript · nextjs · authorization +2

Build an ABAC policy engine in TypeScript with the builder pattern, conditional permissions, and type-safe policy evaluation that replaces RBAC's limitations.

typescript · nextjs · authorization +2

Extend ABAC with environment-based rules, field-level read and write permissions, and automatic database query filtering that eliminates duplicate permission logic.

typescript · nextjs · authorization +2

Add multi-tenant isolation to your permission system, evaluate CASL as a library alternative, and use decision frameworks to choose the right authorization architecture.

typescript · nextjs · authorization +3

Why production teams replace broad MCP access with scoped API proxies. Atlassian, Google Workspace, and Notion via FastAPI proxy, CLI wrapper, and n8n.

mcp · api-design · python +4

A practical guide to AWS Control Tower multi-account strategy: OU structure, SCPs, RCPs, Account Factory for Terraform, IAM Identity Center, and security.

aws · multi-account · security +3

Why the salary-vs-impact-vs-satisfaction debate is a false trichotomy, and what your answer reveals about your vocational development stage.

career · team-dynamics · developer-experience +1

A practical guide to building an org-level shared GitHub Actions platform: architecture decisions, security governance, adoption, and 7 costly mistakes.

github-actions · ci-cd · devops +5

Step-by-step guide to adding Sentry to a React Native Expo app: SDK setup, Expo Router instrumentation, session replay, and source maps for EAS.

react-native · expo · monitoring +2

An analysis of the DevRel role, how it differs from marketing and sales engineering, the skills it needs, and when companies should invest in it.

career · developer-experience · engineering-culture

Strategies to prevent and handle DynamoDB throttling in Single Table Design: partition key design, write sharding, capacity modes, DAX, and retry patterns.

dynamodb · aws · reliability +4

Enterprise patterns for Model Context Protocol: tool composition, multi-agent orchestration, role-based access control, and production observability.

mcp · ai-adoption-strategy · authorization +4

Comprehensive guide to preparing data for RAG systems covering document parsing, chunking strategies, contextual enrichment, and embedding optimization

rag · llm · embeddings +2

How the Forward Deployed Engineer role differs from Solutions Architect and Technical Account Manager, and why AI implementation made this hybrid role essential.

career · ai-adoption-strategy · enterprise

A practical comparison of TypeScript AI SDKs for building agents: Vercel AI SDK, OpenAI Agents SDK, and AWS Bedrock, with code examples and decision frameworks.

typescript · ai-tools · serverless +4

A practical 6-level framework for enterprise AI integration: when to use ChatGPT, RAG, MCP agents, or fine-tuning, with a focus on PII and finance compliance.

ai-adoption-strategy · rag · mcp +2

An implementation-focused glossary for developers navigating the AI/LLM landscape - from tokens to agents, RAG to fine-tuning, with code examples.

llm · ai-agents · rag +6

A comparison of modern TypeScript linting and formatting tools - ESLint, Prettier, Biome, and Oxlint - with benchmarks, config examples, and migration tips.

typescript · code-quality · developer-experience +2

An analysis of bait-and-switch hiring, power imbalances, and underemployment, with actionable frameworks for employees to protect themselves and employers to build trust.

hiring · career · team-dynamics +3

Why acquirers destroy the value they paid for through cultural absorption, with M&A failure patterns, organizational research, and proven integration strategies.

business-strategy · organizational-culture · leadership +3

Run Bun and Deno on AWS Lambda with custom runtimes: performance benchmarks, cost analysis, and production deployment patterns.

lambda · javascript · serverless +2

A technical guide to production-grade prompt engineering: systematic design, security, observability, and cost optimization for enterprise LLM apps.

prompt-engineering · llm · ai-tools +6

How SOLID principles apply to modern JavaScript: practical examples with TypeScript, React hooks, and functional patterns, plus when they're overkill.

typescript · javascript · react +4

A technical guide to choosing and implementing AWS edge computing for global apps, with practical examples and cost optimization strategies.

aws · cloudfront · lambda +6

A technical guide to advanced Amazon Cognito: custom auth flows, federation, multi-tenancy, migration strategies, and production-grade security with CDK.

aws · authentication · serverless +6

A practical guide to learning Effect incrementally and integrating it with AWS Lambda, with real code examples, common pitfalls, and production patterns.

typescript · functional-programming · lambda +4

A technical guide comparing AWS Secrets Manager and Parameter Store, showing when to use each service with real-world implementation patterns and CDK examples.

aws · secrets-management · security +7

A practical guide to API versioning: URL vs header approaches, breaking changes, Sunset-header deprecation, AWS API Gateway, GraphQL, and contract testing.

api-design · deployment · graphql +4

A production guide to feature flags in distributed systems, comparing LaunchDarkly, Unleash, and AWS AppConfig with examples for rollouts and A/B testing.

feature-flags · devops · ci-cd +5

Build reliable, maintainable E2E suites with Playwright and Cypress: framework selection, flaky-test prevention, CI/CD integration, and optimization.

testing · ci-cd · automation +2

A practical guide to multi-tier caching: in-memory, Redis, and CDN layers, cache-aside vs write-through, ElastiCache vs MemoryDB, and stampede prevention.

caching · redis · aws +4

The order that makes AWS cost work stick: visibility with Cost Explorer and Budgets, right-sizing with Compute Optimizer, then commitments.

aws · cost-optimization · aws-cdk +1

A practical guide to Mozilla SOPS for encrypting secrets in Git: age encryption, AWS CDK and Lambda patterns, and production-ready serverless security.

secrets-management · ci-cd · terraform +7

Learn how the Transactional Outbox Pattern solves the dual-write problem in distributed systems, with practical implementations using PostgreSQL, DynamoDB, and CDC tools.

distributed-systems · microservices · event-driven +5

A practical guide to career progression across major tech companies: understanding level equivalencies and making strategic decisions about your engineering path.

career · industry-trends

A comprehensive guide to advanced RAG techniques including hybrid search, reranking, GraphRAG, and self-corrective patterns with production AWS implementation examples.

rag · llm · vector-databases +4

Building scalable real-time APIs with AWS AppSync: JavaScript resolvers, subscription filtering, caching strategies, and infrastructure as code patterns.

aws · graphql · serverless +4

Securing AI agents in production with AWS Bedrock Guardrails, defense-in-depth, and patterns that prevent prompt injection, tool misuse, and multi-agent attacks.

ai-agents · aws-bedrock · security +3

A practical guide to building Internal Developer Platforms with golden paths, self-service infrastructure, and product thinking, using Backstage, Port, and AWS.

platform-engineering · developer-experience · aws +2

A practical guide to consumer-driven contract testing with Pact in TypeScript microservices, catching breaking API changes before deployment.

testing · microservices · api-design +3

Build, secure, and deploy custom Model Context Protocol servers for internal systems in TypeScript, with authentication, monitoring, and Kubernetes deployment.

typescript · mcp · nodejs +5

Implement secure cross-account event distribution with Amazon SNS and SQS: IAM policies, KMS encryption, AWS CDK, and common production pitfalls.

aws · sns · sqs +6

Prompt caching, model routing, token budgets, and semantic caching: how to keep production LLM spend predictable without giving up answer quality.

aws · cost-optimization · llm +3

The architectural evolution from rule-based chatbots to autonomous AI agents, covering ReAct, Plan-and-Execute, and multi-agent patterns in TypeScript.

ai-agents · llm · architecture +2

Implement the Saga pattern across microservices with AWS Step Functions and EventBridge, covering idempotency, compensation logic, and production patterns.

design-patterns · distributed-systems · microservices +4

Build a testing strategy for AWS Lambda, API Gateway, DynamoDB, and Step Functions with practical patterns for fast feedback and reliability.

lambda · testing · serverless +8

Choose between SQS, SNS, and EventBridge by communication pattern, not features, with working CDK examples and a clear cost analysis.

sqs · sns · eventbridge +5

Build production serverless workflows with Step Functions: Standard vs Express, Distributed Map, error handling, and cost optimization with working CDK examples.

step-functions · aws-cdk · serverless +4

Lessons from running LangChain in production: the anti-patterns that cause failures, the patterns that work, with code examples and cost optimization strategies.

langchain · llm · production +5

Learn how MCP standardizes AI tool integration, with TypeScript examples for building servers, managing security, and optimizing performance in production.

mcp · ai-adoption-strategy · claude +3

How AWS Bedrock AgentCore solves the infrastructure challenges of deploying agentic AI at scale, with runtime, memory, gateway, and multi-agent coordination.

aws-bedrock · ai-agents · aws +3

A guide to Aurora architecture, I/O cost analysis, and when to choose it over RDS, with migration strategies and real-world decision frameworks.

aws · data-storage-orm · postgresql +3

Overcome CloudFormation's 500 resource limit with nested stacks, cross-stack references, SSM Parameter Store, and microstack architecture, shown in TypeScript CDK.

aws-cdk · infrastructure-as-code · aws +2

Model relationships, choose between GSI and LSI, integrate DAX caching, and avoid hot partitions in production DynamoDB single-table designs with working examples.

dynamodb · data-storage-orm · aws +1

When to use service-based, domain-based, feature-based, or layer-based organization in AWS CDK projects, with decision frameworks and common pitfalls.

aws-cdk · typescript · infrastructure-as-code +3

How factory functions, higher-order functions, and composition turn AWS CDK into a type-safe, reusable infrastructure toolkit that prevents configuration drift.

aws-cdk · typescript · infrastructure-as-code +2

A technical comparison of MQTT, AMQP, ZeroMQ, CoAP, and DDS for IoT logistics: fleet tracking, cold chain monitoring, and real-time device communication.

messaging · industry-trends · real-time +2

Observer, Strategy, Command, State, and Mediator in TypeScript: which ones the language already covers, and when RxJS, Redux, or XState earn their place.

typescript · design-patterns · functional-programming +1

How Singleton, Factory, Builder, and Prototype patterns evolved in TypeScript: when ES modules replace singletons and when factory functions beat classes.

typescript · design-patterns · architecture +1

Modern patterns from the JavaScript and TypeScript ecosystems - hooks, compound components, render props, and repositories that solve problems the GoF never faced.

typescript · react · design-patterns

How Decorator, Adapter, Facade, Composite, and Proxy patterns evolved in React and TypeScript: when HOCs give way to hooks and how adapters isolate third-party APIs.

typescript · react · design-patterns +2

How the Builder pattern uses TypeScript's type system for safe, discoverable APIs across serverless, data layers, and testing, with working examples.

typescript · design-patterns · aws-cdk +2

Build maintainable, type-safe Lambda middleware with Middy's builder pattern, Zod validation, feature flags, and secrets management for serverless apps.

lambda · middleware · typescript +7

A beginner's guide to OpenTelemetry covering traces, metrics, and logs with practical implementation examples, common pitfalls, and a terminology glossary.

opentelemetry · observability · monitoring +4

Seven lesser-known TypeScript features that improve production code: satisfies, noUncheckedIndexedAccess, branded types, discriminated unions, and more.

typescript · best-practices · code-quality

A practical glossary of essential networking concepts for developers - from protocols and DNS to debugging tools and security basics.

networking · http · debugging +3

A practical guide to the CloudEvents spec and TypeScript SDK: create, parse, and validate standardized events across AWS Lambda and EventBridge.

typescript · serverless · lambda +2

A comprehensive introduction to Domain-Driven Design: core concepts, building blocks, strategic patterns, and when and how to apply DDD in practice.

domain-driven-design · architecture · design-patterns +2

A hands-on guide to Event Storming: what it is, how to facilitate sessions effectively, and when to use this workshop technique for domain modeling.

domain-driven-design · architecture · agile +1

A practical guide to setting up a secure, affordable private server using VPS, Dokploy for deployments, and Cloudflared tunnels for secure access without exposing ports

docker · deployment · cloudflare +2

A practical guide to implementing customer relationship management using event sourcing, CQRS, and event-driven patterns for marketing automation and consent management

event-driven · architecture · microservices +3

A practical comparison of headless CMS options (Strapi, Contentful, Kontent, Storyblok) with Cloudinary image management and framework integration.

typescript · nextjs · react-native +3

A practical introduction to Traefik for developers familiar with nginx. Learn core concepts, setup examples, and when to choose Traefik over traditional reverse proxies.

docker · networking · devops

A framework for six levels of AI assistance in software, from code review to vibe coding, with guidance on when to dial AI help up or down.

ai-tools · code-quality · productivity +4

Where AI coding assistants actually help, why individual speed gains stall at the team level, and what to put in place before widening adoption.

ai-tools · productivity · github-copilot +3

A hands-on guide to adopting AI developer tools: readiness scoring, pilot scope, security controls, review capacity, and the metrics worth tracking.

ai-tools · security · code-review +3

Security risks, governance, and trust building for AI developer tools: the 2025 CVEs, shadow AI discovery, and an incident response playbook for leaked secrets.

security · compliance · team-dynamics +1

A year-one ROI model for AI developer tools: the cost categories vendors leave out, a go/no-go framework, and the conditions that should change the decision.

ai-adoption-strategy · cost-optimization · industry-trends +3

Practical approaches to managing Lambda Layer versions across dev, staging, and production with AWS CDK, automated deployment pipelines, and rollbacks.

aws · lambda · aws-cdk +4

Unclear ownership stalls software delivery. How RACI and DACI assign decision rights, where each one fits, and the pitfalls that kill adoption.

team-management · engineering-management · productivity +2

A practical guide to deploying Next.js beyond Vercel, covering the cost profile, implementation details, and migration path for each target platform.

nextjs · deployment · aws +4

How GitHub's Spec Kit turns loose AI code generation into structured, maintainable output through a four-phase specify-plan-tasks-implement loop.

ci-cd · ai-tools · code-quality +4

Learn to build automated preview environments using AWS CDK, Lambda, and GitHub Actions for seamless PR testing and review workflows

aws-cdk · serverless · ci-cd +5

A foundational guide to key-value storage: what it is, where it fits, why teams choose it, and which solutions ship with which technology stacks.

redis · dynamodb · caching +4

A comprehensive guide to Claude Code, AI agents, and Model Context Protocol servers that transforms developers from basic users to power users

claude-code · mcp · ai-tools +5

Cultural misunderstandings quietly derail global engineering teams; practical frameworks for adapting feedback, meetings and escalation to cultural context.

leadership · team-management · remote-work +2

Unclear role expectations quietly drain software team productivity; here are proven RACI, swim-lane, and escalation frameworks to remove the waste and lift performance.

leadership · team-management · best-practices +4

A field guide to engineering-specific difficult coworkers, from code-review blockers to ghost colleagues, with practical strategies that work for each archetype.

leadership · team-management · best-practices +5

Definitions, implementation context, and defaults for authentication, token, access control, and Zero Trust terminology that teams argue about.

security · authentication · oauth2 +2

A field guide to spotting, managing, and resolving conflict in software teams, with practical frameworks and early-warning systems that turn friction into performance.

leadership · team-management · best-practices +4

How pnpm catalogs stop dependency drift in JavaScript monorepos: one place to declare shared versions, named catalogs for legacy packages, and CI enforcement.

build-tools · nodejs · performance

A section-by-section guide to technical RFCs: what each part has to establish, what reviewers look for, and where proposals stall in review.

rfc · documentation · architecture +3

One-size-fits-all auth is a myth: banking, healthcare, e-commerce and SaaS each shape the authentication architecture differently.

authentication · authorization · security +5

How to transform code reviews from fault-finding into mentorship and learning opportunities that build psychological safety while improving code quality.

code-review · organizational-culture · mentorship +5

How to model GitHub Copilot ROI at enterprise scale: the license and review cost lines, the metrics that matter, payback shape by team size, and rollout anti-patterns.

github-copilot · ai-tools · productivity +7

Systematic profiling for PostgreSQL and MongoDB: how to find the queries driving latency and infrastructure cost, and which fixes actually move them.

data-storage-orm · postgresql · performance +4

How Arnold Mindell's Deep Democracy principles transform technical decision-making, build psychological safety, and ensure every voice strengthens architecture.

psychological-safety · team-management · team-dynamics +4

Where AI-assisted code review catches what humans miss, where humans still excel, and how to build effective human-AI collaboration in your review process.

code-review · ci-cd · security +7

Recognizing distributed monoliths, strategic service consolidation, and the honest reality of moving back to a modular monolith when complexity grows.

microservices · architecture · distributed-systems +2

When a Node.js to Go move on AWS Lambda pays for itself and when it does not: the decision framework, the serverless Go patterns, and the cost math behind the call.

go · nodejs · serverless +5

Why time bugs hide in production, how to migrate from Moment.js to Day.js or date-fns, and how to keep UTC everywhere with conversion only at the display boundary.

nodejs · javascript · productivity +3

Move past green-light dashboards to observability that narrates system behavior, user journeys, and business impact via distributed tracing.

observability · monitoring · opentelemetry +3

Turn adversarial product-engineering standoffs into collaborative delivery with Deep Democracy principles that surface dissent and reduce burnout.

product-management · engineering-management · team-dynamics +4

Where RFC designs diverge from production reality, using notification systems as the worked example, and how to tell useful adaptation from architectural drift.

rfc · production · debugging +4

Design patterns, database schemas, and architectural decisions for building enterprise notification systems that handle millions of users

typescript · postgresql · architecture +4

Implementation strategies for real-time notification delivery across WebSocket, push notification, email, SMS, and webhook channels with production-tested patterns

real-time · notifications · messaging +2

Real-world debugging techniques, monitoring strategies, and lessons learned from notification system failures in high-stakes production environments

debugging · monitoring · production +4

Advanced analytics strategies, A/B testing frameworks, and performance optimization techniques for notification systems serving millions of users

marketing-analytics · performance · testing +3

Practical guidance on RFC structure, stakeholder review, and turning technical debates into decisions a team actually keeps.

rfc · documentation · architecture +3

Implementing custom domains, bulk operations, URL expiration, and defense-in-depth security measures for production link shortener services.

aws-cdk · lambda · security +5

Multi-environment deployment, performance optimization at scale, cost management, and monitoring with solid incident response patterns.

aws-cdk · lambda · dynamodb +6

Multi-region deployment, database scaling, disaster recovery, and long-term maintenance patterns for production systems at scale.

aws-cdk · reliability · scalability +1

Path-based API versioning on AWS API Gateway with CDK: a lifecycle registry per version, per-version Lambda handlers, discovery, and deprecation signals.

api-gateway · aws · aws-cdk +3

Compare Auth0, Firebase Auth, Supabase Auth, AWS Cognito, and custom JWT: which to default to, how the pricing models differ, and the pitfalls to plan for.

authentication · cloud-providers · security

Auth0 multi-audience authentication across micro frontends: token management strategies and silent authentication in React Native with WebView-based apps.

authentication · oauth2 · react-native +1

A step-by-step guide to secure session management in production React Native apps with Auth0, biometric authentication, and proper token lifecycle handling.

authentication · react-native · tutorial

Set up a production-grade link shortener with AWS CDK, DynamoDB, and Lambda: architecture decisions, project layout, and the schema choices that hold up at scale.

aws-cdk · lambda · dynamodb +5

Build the redirect engine, analytics collection, and API Gateway config: performance optimizations and debugging strategies for millions of daily redirects.

aws-cdk · lambda · api-gateway +5

A practical guide to AWS Fargate: task definitions, awsvpc networking, cost trade-offs, and when serverless containers beat managing EC2 hosts yourself.

aws · fargate · ecs +3

Advanced Fargate patterns learned from running production workloads. From cost optimization to stateful containers, here's what the docs won't tell you.

aws · fargate · ecs +4

Fargate failure modes that green dashboards hide: ENI quota exhaustion, subnet routing breaks, memory leaks, and the checks that find each one.

aws · fargate · debugging +4

How to deploy Fargate effectively with different IaC tools. Practical patterns, common gotchas, and what works best for each approach.

aws · fargate · aws-cdk +4

Production-tested strategies for cutting AWS Lambda cold starts: runtime selection, provisioned concurrency, and practical optimization techniques.

lambda · serverless · cold-start +3

Tune AWS Lambda performance: the memory-to-CPU model, benchmarking with Power Tuning, cost analysis, and adaptive allocation patterns.

lambda · serverless · performance +2

Instrument AWS Lambda for production: CloudWatch custom metrics, X-Ray tracing, structured logging, and alerts that track business impact.

lambda · serverless · monitoring +2

Advanced AWS Lambda patterns and cost optimization: Lambda Layers, VPC configuration, cross-account execution, and architectural decisions.

lambda · serverless · cost-optimization +5

When a Lambda fleet outgrows Middy's static middleware model, how a project-specific engine handles per-request config, and what owning one costs

lambda · middleware · performance +6

Discover how Middy transforms Lambda development with middleware patterns, moving from repetitive boilerplate to clean, maintainable serverless functions

lambda · middleware · serverless +5

Hold AWS Lambda warm-path latency inside a 10 ms budget with runtime choice, connection reuse, bundle discipline, caching, and memory tuning.

aws · lambda · performance +4

Handle large file uploads with S3 presigned URLs instead of Lambda proxies: a full CDK stack, both handlers, the browser side, and the security trade-offs.

lambda · aws-cdk · aws +2

Moving from Express.js to Lambda: the common mistakes teams make along the way, and the TypeScript patterns that reduce AWS bills at scale.

api-gateway · cost-optimization · lambda +2

Protect your team from single points of failure through knowledge distribution, documentation strategies, and systematic risk management.

team-management · documentation · knowledge-sharing +5

Implementing the Circuit Breaker pattern in TypeScript: three states, timeout sizing against P99 latency, and threshold defaults per dependency type

architecture · design-patterns · reliability +1

A practical CQRS implementation with AWS Lambda, EventBridge, and DynamoDB, covering event sourcing, eventual consistency, and distributed debugging.

architecture · dynamodb · event-driven +3

Choose the right database across SQL, NoSQL, NewSQL, and edge options: the trade-offs of each category, selection criteria, and a decision framework.

data-storage-orm · postgresql · redis +6

Production-ready DLQ patterns for event-driven systems: monitoring, circuit breakers, exponential backoff, recovery, and the anti-patterns worth avoiding.

cloud-providers · reliability · messaging +2

Documentation debt can slow teams faster than technical debt. A guide to treating docs as critical infrastructure and scaling knowledge across engineering teams.

documentation · rfc · team-management +3

A deep dive into event-driven tools: Kafka, SQS, and EventBridge, message delivery patterns, DLQ strategies, and their AWS, Azure, and GCP equivalents.

architecture · cloud-providers · messaging +4

Before webpack, we concatenated files with Grunt and wrestled with jQuery spaghetti. How frontend tooling grew from manual file management to real build systems.

javascript · build-tools · technical-debt +2

How Grunt reshaped build automation and webpack changed how we think about dependencies: the hard shift from manual processes to modern bundling.

build-tools · webpack · javascript +1

How native tools like esbuild, SWC, and Vite solved webpack's speed problems, taking builds from tens of seconds down to milliseconds.

esbuild · build-tools · vite +4

What edge computing, AI-assisted development and platform integration actually changed in frontend tooling, and which promises the published figures do not support.

edge-computing · ai-tools · deployment +3

Git branching strategies mapped to team size, product type, and release cadence. GitHub Flow is the default; here is when another model earns its overhead.

ci-cd · lessons-learned · team-management +3

How Google's 2009 Closure Compiler shaped modern web tooling, from dead code elimination to type checking, and its lasting mark on today's build tools.

javascript · build-tools · best-practices +6

Every Mermaid diagram type with a copy-ready example: flowcharts, sequence and class diagrams, ER models, Gantt charts, journeys, and more

documentation · tutorial

Advanced micro frontend patterns: event-sourced shared state, bundle budgets, cross-app error tracing, CSP and signed messaging, and strangler-fig migration.

debugging · performance · state-management +1

Micro frontend composition strategies compared: server-side, build-time, Module Federation, and iframe, with the team preconditions that make the trade pay off.

react · tutorial · typescript

Production-ready Module Federation setups, cross-app communication, routing strategies, and the race conditions that break split routing under load.

build-tools · react · tutorial +2

Factories, service layers, and DI containers rarely earn their keep in a Lambda-shaped Node.js service. What replaces them, and where classes still win.

event-driven · functional-programming · lambda +3

Patterns for shipping micro frontends across mobile, web, and desktop: performance, offline support, and production insights, with Rspack and Re.Pack approaches.

expo · performance · re-pack +4

How to implement micro frontend architecture in mobile apps with React Native Expo and WebViews, covering performance, proven patterns, and bundlers.

expo · mobile · re-pack +2

WebView-to-native communication patterns: message passing, service integration, and a type-safe request-response bridge with working code.

expo · mobile · build-tools +4

A practical guide to evolving Node.js monoliths into event-driven serverless functions, with migration strategies and proven architectural patterns.

event-driven · architecture · nodejs +1

Multi-account AWS architecture patterns for resilient event-driven systems: account structure, EventBridge routing, and cross-service communication.

aws · eventbridge · multi-account +5

Implementing OpenTelemetry in React Native with an OTLP collector, Firebase Performance, and Crashlytics for production-grade observability.

cloud-providers · monitoring · opentelemetry +1

Why undici is the sensible default for Node.js server-to-server calls, and when Axios, native fetch, or Effect is the better pick

nodejs · http · functional-programming +3

Why migrate from Serverless Framework to AWS CDK: licensing changes, architectural advantages, and when CDK becomes the better choice for your apps.

aws · aws-cdk · migration

Structure a CDK project for serverless apps, configure TypeScript for Lambda, and set patterns that ease migration from Serverless Framework.

aws-cdk · tutorial

Migrate Lambda functions, API Gateway, request validation, and error handling from Serverless Framework to AWS CDK with practical examples.

api-gateway · aws · aws-cdk +2

Master DynamoDB migrations, environment variable management, secrets handling, and VPC configurations when moving from Serverless Framework to AWS CDK.

aws · aws-cdk · dynamodb +4

Implement robust authentication with Cognito, API Gateway authorizers, and fine-grained IAM policies when migrating from Serverless Framework to AWS CDK.

authorization · aws-cdk · authentication +2

Plan the Serverless Framework to AWS CDK cut-over: blue-green deployment, rollback procedures, infrastructure testing, and performance tuning.

aws-cdk · monitoring · performance

Move from raw AWS SDK complexity to production-ready single-table design with practical DynamoDB Toolbox patterns, common pitfalls, and scaling decisions.

aws · dynamodb · serverless +1

Why synchronous feature flag loading stalls checkout, and how a stale-while-revalidate cache serves React Native flags instantly with background refresh.

feature-flags · mobile · react-native +2

Practical structures and guardrails that raise team autonomy without chaos, drawing on Holacracy, the Spotify model, and Team Topologies.

organizational-design · leadership · dora-metrics

Every markdown typography and formatting feature, from headings and tables to footnotes, definition lists, and admonitions.

documentation · tutorial

Keep a Lambda API and its OpenAPI contract in sync by generating the spec from Zod schemas and wiring that generation into CDK deployment.

api-gateway · aws-cdk · lambda +4