Writing
Architecture decisions, written up in full.
Notes from production work: auth, system boundaries, cloud strategy and the agentic-era tradeoffs that come with them. The decisions, not the keystrokes.
4 articles — All articles
I designed an AI auth-auditing tool around honesty. On its first real run, it confidently lied to me.
The tool was built to detect what it can verify and refuse to guess at the rest. On its first real run it confidently got the basics wrong. The fix had little to do with the prompt and almost everything to do with the structure around it.
Keep the steering wheel: 3 ways to future-proof your auth
Vendor auth libraries quietly become load-bearing architecture nobody chose. Three practices that keep an auth system migratable — and why coding agents make the resilient version nearly free to build.
Securing auth in a large-scale production system: three industry-standard architectures — and why none survived a closer look
Evaluating the auth layer for a Partner Portal of 100+ microservices. Three textbook architectures each looked right on the whiteboard and fell apart on contact with the constraints — here's the one that survived.
Sketching out the extremes: an approach to designing software architectures in highly unpredictable projects
When requirements are genuinely unknowable, picking an architecture up front is a guess. Sketching the two extreme designs first turns that guess into a decision you can defend.