IT application and integration

  • Writing a good Claude.md

    Claude.md matters because it becomes the always-on control surface for coding agents. The technical challenge is balancing reusable repository context against prompt bloat, while pushing style checks and task-specific guidance into deterministic tools and narrower documents.

  • A Repository with 44 Years of Unix Evolution

    A reconstructed Unix history in Git is more than a preservation project: it is an example of how to normalize heterogeneous legacy version-control data into a single, tool-compatible structure that still supports provenance analysis, reproducibility, and long-term software archaeology.

  • What is Multi-Site Certification for ISO 27001?

    Multi-site ISO 27001 is not just a certification choice; it is an operating-model decision. For IT leaders, the key issues are centralized control, evidence automation, and whether local site variation can be managed without creating audit drift or shared certification risk.

  • Secure by Design Principles

    Secure by design matters most where identity, applications, and delivery pipelines intersect. For IT teams, the key challenge is not just preventing attacks, but making authentication, policy enforcement, and deployment controls work consistently across services without creating brittle dependencies or operational friction.

  • Why prioritizing code quality is the fastest way to reduce security risks

    Code quality is now a frontline security control, not just a developer concern. For teams running CI/CD and AI-assisted development, the real challenge is integrating enforcement early enough to reduce risk without creating review noise, ownership gaps, or delivery drag.

  • Improve API discoverability with the new Amazon API Gateway Portal

    Amazon API Gateway Portal matters because it turns API discovery, documentation, and interactive testing into a managed platform capability. For IT teams, the key value is not just convenience, but better governance, cross-account organization, and a cleaner operational model for publishing APIs at scale.

  • The code and open-source tools I used to produce a science fiction anthology

    A useful case study in building a reproducible, scriptable content pipeline with YAML, Python, LaTeX, and EPUB tooling. It matters because the same patterns apply to documentation, publishing, and any workflow that needs version control, auditability, and consistent output across formats.

  • The DoorDash Problem: How AI browsers are a huge threat to Amazon

    AI browsers matter because they turn consumer web sessions into delegated machine actions, forcing companies to rethink authentication, abuse controls, audit trails and customer ownership. For IT teams, the real challenge is integrating agents without losing policy enforcement, observability or transaction integrity.

  • Simplify access to external services using AWS IAM Outbound Identity Federation

    AWS IAM outbound identity federation matters because it replaces static API keys with short-lived, signed tokens for external integrations. For platform, security, and application teams, that shifts trust, policy, and verification into the architecture of every cross-service connection.

  • Building an AI gateway to Amazon Bedrock with Amazon API Gateway

    An API Gateway front end for Amazon Bedrock turns model access into a governed enterprise service, adding authorization, throttling, and deployment control without forcing client rewrites. For platform and cloud teams, the architectural value is in separating policy enforcement from AI application code.

  • The Trillion Dollar Problem

    Semantic layers matter because they turn scattered metric logic into a governed integration boundary. For IT teams, that changes how analytics, BI, and AI systems share definitions, reduces drift across tools, and makes metric updates more maintainable without rebuilding every downstream report or workflow.

  • What to Automate and What to Keep Human in Your Instagram Direct

    Instagram Direct automation is less about replacing staff than designing the right control points between AI, business systems, and humans. For IT teams, the real issues are integration, governance, escalation, and keeping source data and handoffs reliable as conversations move from bots to people.