ls writing/

Writing

Posts on things I’ve built, broken, and learned from.

  1. Shipping Software You Can't Log In to Fix

    Decisions from six years of software running in customers' own data centers, and what each one taught me about assumptions.

    on-prem · kubernetes · release engineering

  2. Proof Over Trust: How Rebuilt Packages, SLSA 3, and Cosign Fit Together

    What rebuilding 500k+ open source artifacts from source at Chainguard taught me about SLSA 3 provenance, cosign, and why 'nearly reproducible' still needs proof.

    supply chain security · slsa · sigstore · cosign

  3. My Approach to Engineering With AI Agents

    How I use AI agents every day, from specs to tickets to PRs, what happened when two teams adopted them, and why our release process splits work between machines, agents, and people.

    ai · claude code · release engineering · engineering leadership

  4. Quarkus vs. Spring Boot

    How LogicMonitor evaluated and migrated from Spring Boot to Quarkus, achieving 85% CPU and 88% memory reductions

    java · quarkus · kafka · kubernetes