Blog
Notes on building software, scaling teams, and shipping product.
Cloud & DevOpsPostgres 14 Ends 12 November. Skip 19, Take 18.
Postgres 14 receives its final fix on 12 November. Postgres 19's GA has slipped to late October at best. Upgrading to a two-week-old major release to escape an EOL date is the wrong trade.
17 min#Postgres#Database Migration#DevOps#End of Life
SaaS PlatformThe Regulation Is Not Your Schema
EFRAG published the revised ESRS datapoint list in two versions — one of them a mapping back to the 2023 standard. That mapping is a migration file, and most compliance products cannot run it.
15 min#Compliance Software#Data Modeling#RegTech#ESRS
AI EngineeringYour Agent's Safety Story Has Two Tables. Only One Holds.
Anthropic's commerce blueprint splits its guardrails into two tables: what the code enforces, and what the prompt merely asks. Only one holds on any model. Here is how to audit your own agent.
13 min#AI Engineering#AI Agents#Guardrails#Agentic Commerce
SaaS PlatformYour MCP Server Is Now a Normal HTTP Service
Everyone read the 2026-07-28 MCP spec as a scalability win. It is a governance bill — and the two headers it made mandatory are the most useful thing in it. Here is what to fix.
13 min#MCP#SaaS Architecture#API Design#Agent Infrastructure
SaaS PlatformYour AI ROI Is Sitting in the Review Queue
84% of developers say AI made them faster. Only 20% of companies can prove it. The saved hours are real — they are sitting in your review queue, and you can measure that today for free.
12 min#CTO Strategy#AI Productivity#Engineering Metrics#Code Review
AI EngineeringYour Agent Sandbox Has a Hole in It, and It Is Egress
The agent never escaped the sandbox. It used the internet access it was handed. Filesystem isolation is not containment — egress is the boundary, and here is how to tier it and audit it this week.
13 min#AI Engineering#AI Agents#Sandboxing#Security
SaaS PlatformPostgres 19 for Multi-Tenant SaaS: Skip REPACK, Tune Autovacuum
Every Postgres 19 roundup leads with REPACK CONCURRENTLY. For a shared-schema multi-tenant SaaS it is the wrong feature — and the one that matters ships disabled by default.
11 min#Postgres#Multi-Tenant#SaaS Architecture#Autovacuum
Cloud & DevOpsHow I Patch Next.js Security Releases Without a Security Team
Next.js now ships pre-announced monthly security patches — four high-severity CVEs in the first batch. The exposure triage and patch runbook I run to absorb them with no security hire.
9 min#Next.js#Security#DevOps#Dependency Management.jpg%3F2026-07-29T09%253A59%253A53.643Z&w=3840&q=100)
SaaS PlatformBuild vs. Buy for AI Features: The Three-Layer Test
"Build vs. buy" is the wrong question for an AI feature. Split it into three layers — model, orchestration, surface — and a five-question test tells you which one to build and which to rent.
10 min#Build vs Buy#AI Strategy#Fractional CTO#Founder Strategy
AI EngineeringWhen Multi-Agent Systems Are Worth It
Adding a second agent isn't an upgrade — it's a 3–10x token bill and a new failure mode. When a multi-agent system actually earns its cost, and the control layer I put around every spawn.
9 min#AI Engineering#AI Agents#Multi-Agent#Claude Code.jpg%3F2026-07-14T18%253A30%253A14.918Z&w=3840&q=100)
Cloud & DevOpsPlatform Engineering Without a Platform Team
The industry turned platform engineering into a hiring decision. It isn't. The minimum viable platform I run on Keaz across twelve services — no platform team — and when to finally hire one.
10 min#Platform Engineering#DevOps#Docker Swarm#DORA
SaaS PlatformHow I Ingest Webhooks Without Losing Events
A webhook handler that does real work inline is a data-loss bug waiting for a traffic spike. The durable pattern I run on Keaz — persist, queue, process idempotently — and where it breaks.
9 min#SaaS Architecture#Webhooks#Event-Driven#Postgres