Insights
Perspectives on application modernization, practical AI, and building systems that hold up — written by the engineers who build them.
All Posts
Grounding Before Agents: A Build Order for Regulated AI
The instinct in regulated environments is to reach for an agent loop first. The disciplined build order runs retrieval quality, then model evaluation, then a grounding gate — before any agent gets tool-calling authority.
AI Sprawl Has a Cost Problem — Here's the Consolidation Pattern
Every team spinning up its own model endpoint and its own database felt fast in month one. By month twelve nobody can answer what AI actually costs, or who's responsible for it.
App Developer vs Cloud App Administrator: Getting Entra ID Governance Right
The risk isn't that a developer owns an app. The risk is granting tenant-wide administrative capability because you haven't properly scoped developer access.
Zero Trust Is Not a Product — It's How You Build
Legacy modernization projects fail when they treat Zero Trust as a checkbox. Here's how to engineer identity verification into every layer of your application stack.
Entra ID Integration Patterns for Modern Web Applications
A technical guide to implementing Microsoft Entra ID authentication in Next.js applications with proper token handling, silent refresh, and conditional access alignment.
Infrastructure as Code for Azure Landing Zones
How we deploy FedRAMP-aligned Azure Landing Zones using Terraform, eliminating configuration drift and reducing provisioning time by 60%.