October 26, 2026
A coding CLI becomes a service when sessions have owners
Turning a coding agent into a shared service makes session ownership, reconnect behavior, authorization and cleanup part of the system contract.
Read article
Posts tagged “architecture”.
One tag at a time. The full list is on the articles page.
October 26, 2026
Let durable orchestration earn its place
I explain how to decide whether long-running work needs persisted progress and recovery or is adequately handled by a queue and consumer.
Read article
October 26, 2026
Treat workflow changes as governed releases
I explain how to inventory workflow changes across repositories, require trusted review, and keep credentials out of untrusted workflow runs.
Read article
October 26, 2026
Treat Kubernetes lifecycle data as a compatibility signal
A release-note check helps keep generated Kubernetes API lifecycle data from turning into an unverified platform support promise.
Read article
October 26, 2026
Let customers choose the observability backend
A stable OpenTelemetry export contract lets customers change observability backends without turning your application into a vendor-specific product fork.
Read article
October 26, 2026
Keep process-metric release candidates out of stability dashboards
A practical way to test OpenTelemetry process-metric release candidates without turning provisional names and attributes into operational contracts.
Read article
October 26, 2026
Pin C# language behavior separately from the .NET SDK
I explain why SDK selection and C# language policy belong in separate settings, and how to roll out language changes across a repository fleet.
Read article
October 26, 2026
Give workflows an access model before secrets get finer-grained
A purpose-based access model helps teams reduce GitHub Actions secret exposure now and adopt finer-grained controls without confusing configuration for policy.
Read article
October 26, 2026
Put a hard budget around nested coding-agent work
I argue for treating nested coding agents as a resource-control problem, with enforceable limits on delegation, tools, spend and elapsed time.
Read article
October 26, 2026
Treat optional device operations as a workload contract
I argue that optional Kubernetes device operations should change how platforms declare device capabilities and how workloads handle missing setup or cleanup.
Read article
October 26, 2026
Decide what a Kubernetes workload class is allowed to mean
A workload class can organize Kubernetes workloads or drive platform behavior; I explain why its meaning, ownership and guarantees must be explicit first.
Read article
October 19, 2026
Kubernetes 1.37 makes webhook concurrency an upgrade test
A practical upgrade check for whether your CRD conversion webhook can handle parallel calls during Kubernetes 1.37 API cache initialization.
Read article
October 19, 2026
Validate .NET 11 tracing before changing instrumentation
A practical comparison of ASP.NET Core’s built-in traces and existing application spans helps identify duplication, missing context, and what to keep.
Read article
October 19, 2026
QuickGrid virtualization is a data contract
QuickGrid virtualization depends on stable ordering, useful filtering, and predictable range queries, not only on rendering fewer rows.
Read article
October 19, 2026
Keep roadmap commitments independent of PostgreSQL 19’s release date
I explain how to evaluate PostgreSQL 19 features without making a delivery plan depend on an unsettled release or feature set.
Read article
October 19, 2026
Treat repository-relative workflow references as a versioning choice
A repository-relative GitHub Actions reference ties a reusable workflow to the caller's version, trading centralized upgrades for co-versioned changes.
Read article
October 13, 2026
Kubernetes node swap is a workload policy, not a sizing strategy
I explain when Kubernetes node swap can soften memory pressure, when it can hide a capacity problem, and how to pilot it without mistaking swap for free memory.
Read article
October 13, 2026
Audit who owns your Kubernetes service IPs
An ownership-first audit of Services using externalIPs helps you choose a safe migration path before Kubernetes removes that behavior.
Read article
October 13, 2026
Execution policy belongs outside the workflow
GitHub Actions execution protections can block disallowed runs before workflow code starts, but they cannot make trusted workflow code safe.
Read article
October 13, 2026
PostgreSQL 14’s end of life is a compatibility-planning problem
PostgreSQL 14 reaches end of life on November 12, 2026; I explain how to map compatibility checks and sequence migration work around each workload.
Read article
October 13, 2026
Kubernetes 1.37 has two adoption gates
I separate the decision to adopt Kubernetes 1.37 from the decision to rely on it in production, then explain how to keep that policy portable.
Read article
October 13, 2026
A workflow security incident needs a recovery design
A recovery-ready CI architecture maps compromised actions to repositories and credentials, then restores safe shipping without reopening the same blast radius.
Read article
October 13, 2026
Worktrees move agent risk to integration contracts
I explain why isolated agent worktrees reduce edit collisions but leave task ownership, interface compatibility and integration decisions unresolved.
Read article
October 13, 2026
Trial .NET 11 without changing the production build
A reusable pipeline can test services with the .NET 11 preview SDK and runtime while keeping its established production toolchain unchanged.
Read article
October 8, 2026
Treat observability integrations as operational dependencies
A support-window plan for cluster integrations helps teams schedule upgrades deliberately and preserve options when vendor compatibility timelines differ.
Read article
October 8, 2026
A connection-count metric is not a pool health check
A database connection count shows how many clients are present, not whether an application pool is saturated, queuing work or holding connections idle.
Read article
October 6, 2026
Managed coding agents change the control-plane question
A practical way to compare managed coding agents with agents running in your own environment is to trace who controls access, execution and evidence.
Read article
October 6, 2026
Ingress controller retirement is an architecture migration
A practical way to replace a retired ingress controller is to map the edge responsibilities first, then preserve the external-to-internal contract deliberately.
Read article
October 5, 2026
Kubernetes Pod user namespaces are worth piloting
I explain how Pod user namespaces change the host-side impact of a container escape, what they do not replace, and what I would test before relying on them.
Read article
October 5, 2026
Treat OpenTelemetry as an application-to-platform boundary
I explain which telemetry decisions belong in application code, which belong in the platform, and how to keep the seam portable without hiding ownership.
Read article
October 4, 2026
Compute-storage separation does not remove lock-in
Azure HorizonDB shows why PostgreSQL portability depends on operational boundaries and exit paths, not just SQL compatibility.
Read article
October 4, 2026
Treat coding-agent memory as a cache
Learn why coding-agent memory is useful context, not an architectural record, and how to keep reviewed decisions authoritative when memory goes stale.
Read article
October 2, 2026
Make secret access explicit in reusable workflows
Learn how scoped secrets could change reusable workflow contracts, and how to roll out explicit access and verify it with execution telemetry.
Read article