Older posts.
Prompt Management in 2026: Registries, Rollbacks and Five Acquisitions
How to version, deploy and roll back LLM prompts like code in 2026: Git vs Langfuse, PromptLayer, Braintrust and MLflow registries, labels and aliases, eval gates in CI, and what the Langfuse, Promptfoo, Helicone, Galileo and Humanloop deals mean for your stack.
13 minOct 20, 2026How to Defend LLM Apps Against Prompt Injection: 8 Steps (2026)
A practical prompt injection defence guide for LLM apps and agents: break the lethal trifecta, split privileged and quarantined models, gate tool calls in code, sanitise output, add Prompt Guard 2 as a tripwire, and red team with garak 0.17.1 and promptfoo 0.124.1.
17 minOct 20, 2026How to Fix Prometheus High Cardinality: Find and Drop Series (2026)
Step-by-step guide to finding and fixing high cardinality in Prometheus 3.x: the TSDB status page and API, topk count by __name__, promtool tsdb analyze, metric_relabel_configs drop rules, native histograms, recording rules, sample_limit guardrails and Prometheus OOM fixes.
13 minOct 20, 2026Progressive Delivery in 2026: Feature Flags vs Canary vs Blue-Green
Feature flags, canary releases and blue-green deployments compared for 2026: OpenFeature is still CNCF incubating with spec v0.9, flagd 0.18 changed its hashing, OpenAI bought Statsig, and the Google Cloud, Cloudflare and CrowdStrike outages show what unflagged changes cost.
13 minOct 20, 2026How to Implement Multi-Tenancy with Postgres Row-Level Security (2026)
Step-by-step Postgres row-level security for multi-tenant SaaS: tenant_id schema design, FORCE RLS and non-owner roles, policies using current_setting, SET LOCAL with PgBouncer transaction pooling, indexes, CI isolation tests and fixes for common errors.
13 minOct 20, 2026How to Tune pgvector Performance: HNSW, ef_search and Quantization (2026)
A step-by-step pgvector tuning guide for 0.8.x: HNSW vs IVFFlat, m, ef_construction and ef_search, maintenance_work_mem for fast builds, iterative scans for filtered queries, halfvec and binary quantization, EXPLAIN, and a troubleshooting table, with real timings.
14 minOct 20, 2026OWASP Top 10 for LLMs 2026 and Agentic Apps: 20 Risks, Real Incidents
The OWASP Top 10 for LLM Applications 2026 and the Agentic Top 10 explained risk by risk: what moved since 2025, the real incidents behind each entry (EchoLeak, Amazon Q, postmark-mcp, Replit), and the infrastructure controls that contain them.
13 minOct 20, 2026How to Set Up the OpenTelemetry Collector on Kubernetes (2026)
Step-by-step OpenTelemetry Collector setup on Kubernetes with Helm chart 0.176.0 and Operator 0.161.0: agent DaemonSet vs gateway, k8s_attributes, auto-instrumentation with the Instrumentation CR, and fixes for dropped spans and memory_limiter refusals.
14 minOct 20, 2026Observability vs Monitoring: What's the Difference in 2026?
Observability vs monitoring explained for 2026: the SRE-book definition of monitoring, where observability came from, three pillars vs wide events, what OpenTelemetry does, and what Grafana's 2026 survey of 1,363 teams says about cost and tools.
13 minOct 20, 2026Multi-Tenant SaaS Architecture Explained: Silo, Pool, Bridge, Cells (2026)
Multi-tenant SaaS architecture explained: the AWS SaaS Lens silo, pool and bridge models, database-per-tenant vs shared schema with row-level security, noisy neighbours, cell-based architecture, and how to work out cost per tenant, with real examples.
12 minOct 20, 2026How to Build Multi-Region Failover with Route 53 and Cloud DNS (2026)
Step-by-step multi-region failover: active-passive vs active-active, Route 53 health checks and failover records in Terraform, ARC routing controls, Cloud DNS failover policies, Aurora Global Database and Spanner, failover testing, and fixes for DNS TTL and caching problems.
16 minOct 20, 2026MLOps Platforms Compared 2026: MLflow vs Kubeflow vs SageMaker vs Vertex
An engineer's 2026 comparison of MLflow 3.17, Kubeflow 26.03, SageMaker AI, Vertex AI (now Gemini Enterprise Agent Platform), Databricks, W&B inside CoreWeave Forge, ZenML and Metaflow, with real prices, lock-in risk and a decision table.
13 minOct 20, 2026How to Use MLflow 3: Tracking, Model Registry and GenAI Tracing (2026)
Step-by-step MLflow 3.17 guide: run a tracking server on PostgreSQL and S3, log runs and LoggedModels, register models with aliases instead of stages, trace and evaluate a GenAI app with mlflow.genai, serve the champion model, and fix the errors you will actually hit.
12 minOct 20, 2026How to Migrate From ingress-nginx to Gateway API: Step-by-Step (2026)
A tested, step-by-step ingress-nginx to Gateway API migration: inventory annotations, install Gateway API v1.6.3 and Envoy Gateway v1.9.2, convert with ingress2gateway v1.2.0, handle TLS, rewrites and canaries, read route status conditions, cut over with DNS and roll back.
13 minOct 20, 2026MCP Authorization Explained: OAuth 2.1, RFC 9728 and CIMD in 2026
How MCP authorization works in the 2026-07-28 spec: OAuth 2.1 with PKCE, RFC 9728 protected resource metadata, RFC 8707 resource indicators, Client ID Metadata Documents replacing deprecated DCR, the token passthrough ban, and enterprise IdP access through ID-JAG.
12 min