Field notes on infrastructure, development and AI.
Infrastructure on AWS and GCP, developer experience and architecture, and AI — Claude Code, the Agent SDK and agent workflows doing real business work. Plus the Claude Code plugins I build and hand out for free.
Latest writing
All posts →- An AI assistant needs one door into your data, not a key to every SaaS appSteward gives Claude a single read-only tool over the curated warehouse, with field-level authorization compiled to Cedar. Here is why I built it that way instead of wiring up one connector per product.AI
- An ADR is only as good as what actually reads itA decision record that only lives as prose is something an agent has to be told to go open. The ones that survive are the ones also wired into a table, a script, or a test the agent's normal workflow already touches.Development
- Bedrock model access is three gates, not one permissionA Bedrock AccessDeniedException can mean three different things, so we built a nightly discovery job and a runbook that checks each gate in order.Infrastructure
- The credential nobody watchedA shared service-account token expired silently and took a production integration down for 40 hours. The fix that mattered wasn't rotation. It was making four causes of the same error distinguishable.Infrastructure
- I deleted five AI review agents and the reviews got betterA five-specialist review fan-out looked thorough. One session cost $5.88 and 905 seconds for zero findings, and that's what actually changed the design.AI
What I write about
Marketplace
View all →agent-craftDesign rules for systems built on the Claude API and Agent SDK.agent-sdkarchitectureauthoringconfig-auditcode-review-coreForge-neutral code review: detectors find, agents judge, a validator owns the verdict.code-reviewstatic-analysisqualitydatadog-observabilityThe Datadog adapter for observability-core — real queries for incidents and triage.datadogobservabilityincidentmonitoring
Who writes this
Two decades in DevOps and SRE: cloud hosting for TUI Travel in 2011, when AWS was three services; delivery pipelines, infrastructure as code and a 25-person SRE team at Malwarebytes. Now on the business side at KnowBe4, helping Sales, HR, Legal, Security and Engineering hand real processes to AI, and measuring whether it paid off.
New posts, no inbox required
No newsletter and no email address — just a feed.