August 8, 2026 · 9 min read Migrating Off a Platform That's Fighting You: WordPress to Astro A real WordPress + Elementor site rebuilt as a static Astro site: preserving five years of URLs, rewiring 1.7 GB of images that pointed at three different dead hosts, and the last step nobody talks about, which is destroying the old server. Cloud Migration Astro WordPress Platform Engineering GitOps
August 3, 2026 · 10 min read It's Not Skynet, and It's Not Reading Your Mind What ChatGPT, Claude, and Gemini actually are, in plain English. Why they aren't plotting anything, why one of them knew about your family, and where the real risks actually live. AI LLMs Explainer Privacy AI Literacy
July 30, 2026 · 8 min read RAG Is Context Engineering, Not a Chatbot Trick Most explanations of RAG stop at 'chat with your PDF.' For a long-running agent, retrieval isn't a one-shot lookup: it's how you decide, at every step, what belongs in a limited context window and what gets left out. AI Agents Agentic Engineering LLMs Context Engineering AI
July 23, 2026 · 6 min read Kill Your Public Management Ports: Zero-Trust Access with Tailscale Every open port on a droplet is a standing bet against the entire internet. Here's how I stopped taking that bet: the real Tailscale setup behind this site's own analytics stack, the three things that broke before it worked, and the one port I still haven't closed. Security Tailscale DevSecOps Cloud Foundation Zero Trust
July 11, 2026 · 6 min read One File to Govern Them All: A Policy Layer for Every AI Agent Every project I own has its own CLAUDE.md, and none of them can override the one thing that actually matters. How a three-layer policy hierarchy turns AI governance into filesystem permissions instead of a promise. AI Agents Agentic Engineering AI Governance DevSecOps AI
July 10, 2026 · 7 min read I Built My Own Consulting ERP Generic invoicing tools don't fit a solo consultant's actual pipeline, so I built Helm: a local-first back office where proposal, SOW, invoice, and tax set-aside all live in one connected model. This is the dogfooding story, and the decision that almost shipped it as the wrong kind of app. Full-Stack Engineering Product Engineering Local-First PWA React
July 9, 2026 · 6 min read Push to Main, Ship to Prod: The Bug That Ate a Deploy GitOps promises that merging to main quietly becomes a live deploy. Here's the merge that looked perfect everywhere except in production, the exact error that explained it, and the boring fix that makes sure it can't happen twice. CI/CD GitOps Platform Engineering DevOps DigitalOcean
July 8, 2026 · 6 min read Should Your AI Agent Be Able to Edit Its Own Guardrails? Should an AI agent be allowed to edit its own guardrails? The answer is yes, if you separate the control plane from the data plane. Here's how, and why it's the safety. AI Agents Agentic Engineering DevSecOps Security AI
July 7, 2026 · 7 min read No, I'm Not Vibe Coding The critics of AI-generated code are mostly right, and that's exactly why 'vibe coding' doesn't describe how I work. The whole line is: who reads the code? AI Agents Agentic Engineering DevSecOps Software Engineering AI
July 6, 2026 · 15 min read From Sand to Sorcery: How LLMs and AI Agents Actually Work A working engineer's ground-up map of how LLMs, tool use, and AI agents actually operate. No hype: just a stateless next-token function, wrapped in a loop. AI Agents LLMs Machine Learning DevOps Explainer
July 5, 2026 · 6 min read Two Ravens, Two Wolves, and a High Seat I run two dozen GitHub repos as one estate with five small CLIs named for Odin's ravens and wolves. Here's the pack, and why the myth is really just good ops. Platform Engineering Automation Developer Tools Bash Open Source
July 4, 2026 · 5 min read Your AI Coding Agent Is an Over-Eager Intern AI coding agents are brilliant, tireless, and eager to a fault, which is exactly what makes them dangerous. Why speed quietly defeats review, and how a handful of automated guardrails keep an over-eager agent from merging something regrettable. AI Agents DevSecOps Code Review CI/CD AgentGate