Writing
Blog
Notes on system design, security, and where AI actually belongs in a workflow.
2 min read
Why I Reach for Server-Sent Events Before WebSockets
Most 'real-time' features are one-directional. SSE gives you that with a fraction of the operational complexity of a WebSocket server.
System DesignNext.jsArchitecture
2 min read
Designing RBAC That Doesn't Fall Apart at Scale
Role-based access control is easy to build and easy to build wrong. The failure mode isn't a missing check — it's checks scattered across the wrong layer.
SecurityArchitectureSoftware Engineering
2 min read
Where AI Actually Earns Its Place in a Workflow
The question isn't whether you can add an LLM to a feature. It's whether a deterministic solution would be more reliable — and cheaper to debug.
AIAutomationSoftware Engineering