Posts
Posts are time-based write-ups, what I learned this week, notes from a project, experiments. Newer posts appear first.
Each post lives at posts/YYYY-MM-DD-<slug>.md. Posts are meant to be portable: the same markdown can be pasted into dev.to, Medium, or LinkedIn with minimal edits.
Recent standalone posts
- Monolith to microservices, one boundary at a time, checkout examples explain outboxes, retries, compensation, and choosing a first service.
- Prompt hijacking and agent instruction exfiltration, attack methods, trust boundaries, and synthetic tests for protecting agent instructions and tool workflows.
- Supabase: a Postgres backend, with a working quick start, practical comparisons and a complete private notes app with authentication and row ownership policies.
Post series
- Engineering Guardrails for AI Systems, a 14-part path through threat models, prompt injection, enforceable tool boundaries, MCP and agent controls, security evals, causal tracing, and incident response.
- Home-health routing system, a project-shaped sequence through home-health data, compliance, tenancy, workflow states, route optimization, ML scoring, and async fanout.
- Auth and browser security, browser boundaries, token placement, stateless auth, rate limits, and prompt-injection failure modes.
- Software design principles, design advice grounded in SOLID, composition, and concurrency control.
- CS reference sheets, quick-reference posts for data structures and named algorithms.
- Modern React development, a 40-part React sequence covering core React, common frameworks, tooling, testing, and production concerns.
- Zero to iOS Hero, a production-shaped path through Swift, Xcode, SwiftUI, UIKit, architecture, testing, shipping, Apple platform capabilities, and complete app case studies.
- Domain-Specific Languages in Practice, a research-backed guide to DSL definitions, concrete examples, gotchas, tooling, business value, calculator-based evaluation, and production operation.
- MCP Server Design, a nine-part path from HTTP and REST comparisons through protocol mechanics, TypeScript server and client implementation, model tool loops, bidirectional features, and production security.
- Coding Agent Internals, a clean-room path through terminal agent loops, context assembly, tools, permissions, hooks, subagents, MCP, evals, and containment.