Blog

Thoughts & Stories

Sharing my experiences, learnings, and adventures in tech and beyond.

Browse by Topic

DevOps & Cloud Infrastructure (193)AI & LLMs (143)Backend & APIs (102)Web Development (90)ERP Systems (77)Security (65)Software Development (58)Career Reflections (29)Cloud (29)AI / Machine Learning (18)Product & SaaS (12)University (1)Hackathons (1)

SecurityOctober 202612 min read

GitHub Agentic Workflows Study: The Prompt Injection Gap

A close reading of the arXiv study of 1,248 gh-aw workflow files: how they are written, maintained, and why only 9.4% address prompt injection.

DevOpsOctober 202612 min read

GitHub Agentic Workflows: Markdown Automation with gh aw

GitHub Agentic Workflows writes repository automation in Markdown and compiles it to locked Actions YAML. Here is what compile checks, what stays read-only, and the traps.

DevOpsOctober 202611 min read

Terraform MCP Server GA: A Safe Agent Setup Since 1.1.0

Run the GA Terraform MCP server safely: pin 1.3.0, keep ENABLE_TF_OPERATIONS off, set the org allowlist and survive the 1.1.0 breaking changes.

AI/MLOctober 202612 min read

Datadog Scout 1.0: What Cheaper AI SRE Investigations Mean

Datadog says its RL-trained Scout model investigates alerts at a fraction of frontier-model cost. A close reading of AlertEval, SREGym, the credit pricing and the limits.

AIOctober 202611 min read

Elastic nightshift AI SRE: Start With the Investigation Engine

Elastic nightshift AI SRE has four engines: Context, Detection, Investigation, Remediation. Why Investigation alone on existing alerts is the safest start.

CloudOctober 202612 min read

Azure SRE Agent: Tool Permissions, Hooks and Approval Gates

How Azure SRE Agent stacks hooks, allow/ask/deny tool policies, connector approvals and run modes, where Ask quietly stops asking, and what to configure first.

Showing 97–102 of 818 posts

Explore More

Projects

See the projects I've built

Experience

My professional career

Certifications

Professional certifications