Writing
Notes from production - migrations, incidents and architecture decisions from systems I actually run. No listicles.
- Google's GEO guide is out, and the news is that there is no trick
Everyone is selling generative engine optimization as a new dark art. Google's own guidance says the opposite: to show up in AI answers, do the SEO you should already be doing. Here is what actually matters and what to ignore.
- MCP is going stateless, and it fixes the problem I kept hitting
The 2026-07-28 MCP revision removes protocol-level sessions and the initialize handshake. State stops hiding in the transport and moves into explicit, model-visible handles. Here is what changed, what breaks, and what I would do about it today.
- A wrong security rule is worse than a missing one
I spent weeks building an LLM-based code security scanner. The hardest lesson had nothing to do with prompts: a detection rule that is subtly wrong hides real bugs and invents fake ones at the same time. Here is what that looks like in practice.
- HTTP finally has a QUERY method. I spent an hour finding out what works today
RFC 10008 gives HTTP a safe, idempotent method with a request body - the thing search endpoints have needed forever. Here is what actually works right now: Node, fetch, curl, and my own Cloudflare-hosted site.
- Migrating a live IoT platform off self-hosted Kubernetes - without a single forced app update
Moving an accessibility platform to Google Cloud Run starting from backups, with three different databases, a telemetry stream that never pauses, and one hard rule: nobody gets forced to update the app.