Blog
Notes on building software, scaling teams, and shipping product.
SaaS PlatformYour MCP Server Is Now a Normal HTTP Service
Everyone read the 2026-07-28 MCP spec as a scalability win. It is a governance bill — and the two headers it made mandatory are the most useful thing in it. Here is what to fix.
13 min#MCP#SaaS Architecture#API Design#Agent Infrastructure
SaaS PlatformYour AI ROI Is Sitting in the Review Queue
84% of developers say AI made them faster. Only 20% of companies can prove it. The saved hours are real — they are sitting in your review queue, and you can measure that today for free.
12 min#CTO Strategy#AI Productivity#Engineering Metrics#Code Review
AI EngineeringYour Agent Sandbox Has a Hole in It, and It Is Egress
The agent never escaped the sandbox. It used the internet access it was handed. Filesystem isolation is not containment — egress is the boundary, and here is how to tier it and audit it this week.
13 min#AI Engineering#AI Agents#Sandboxing#Security
SaaS PlatformPostgres 19 for Multi-Tenant SaaS: Skip REPACK, Tune Autovacuum
Every Postgres 19 roundup leads with REPACK CONCURRENTLY. For a shared-schema multi-tenant SaaS it is the wrong feature — and the one that matters ships disabled by default.
11 min#Postgres#Multi-Tenant#SaaS Architecture#Autovacuum
Cloud & DevOpsHow I Patch Next.js Security Releases Without a Security Team
Next.js now ships pre-announced monthly security patches — four high-severity CVEs in the first batch. The exposure triage and patch runbook I run to absorb them with no security hire.
9 min#Next.js#Security#DevOps#Dependency Management.jpg%3F2026-07-29T09%253A59%253A53.643Z&w=3840&q=100)
SaaS PlatformBuild vs. Buy for AI Features: The Three-Layer Test
"Build vs. buy" is the wrong question for an AI feature. Split it into three layers — model, orchestration, surface — and a five-question test tells you which one to build and which to rent.
10 min#Build vs Buy#AI Strategy#Fractional CTO#Founder Strategy
AI EngineeringWhen Multi-Agent Systems Are Worth It
Adding a second agent isn't an upgrade — it's a 3–10x token bill and a new failure mode. When a multi-agent system actually earns its cost, and the control layer I put around every spawn.
9 min#AI Engineering#AI Agents#Multi-Agent#Claude Code.jpg%3F2026-07-14T18%253A30%253A14.918Z&w=3840&q=100)
Cloud & DevOpsPlatform Engineering Without a Platform Team
The industry turned platform engineering into a hiring decision. It isn't. The minimum viable platform I run on Keaz across twelve services — no platform team — and when to finally hire one.
10 min#Platform Engineering#DevOps#Docker Swarm#DORA
SaaS PlatformHow I Ingest Webhooks Without Losing Events
A webhook handler that does real work inline is a data-loss bug waiting for a traffic spike. The durable pattern I run on Keaz — persist, queue, process idempotently — and where it breaks.
9 min#SaaS Architecture#Webhooks#Event-Driven#Postgres
Cloud & DevOpsFour Capabilities a Small Team Needs Before It Scales AI Coding
AI raised throughput and cut stability in 2026. The four delivery capabilities that let a five-person team absorb AI-generated code without an incident spike — no platform team required.
8 min#Cloud#DevOps#Platform Engineering#DORA
SaaS PlatformThe Fractional CTO in 2026 Is a Person Plus an AI Agent Team
The 2026 fractional CTO isn't an advisor — it's a senior operator plus an AI agent team. The DORA data behind the shift, and five questions that separate operators from part-time advisors.
9 min#Fractional CTO#AI Agents#Founder Strategy#DORA
AI EngineeringPer-User Token Budgets: The Backend Layer That Survives Billing Changes
A backend budget-enforcement layer for AI products: meter per-user token spend, step models down, and degrade gracefully so a vendor credit cap never takes your product offline.
10 min#AI Engineering#Token Economics#Cost Control#Graceful Degradation