▸ Blog
Notes from the trenches.
Laravel internals, AI engineering with Claude + MCP, RAG pipelines, Shopify Plus, DevOps. Production lessons from shipped work — every post earns its slot. Featured = hand-picked or most recent.
▸ 73 posts · last updated
Sep 18, 2026
▸ New here? Start with these
Browse series▸ Search the blog
Browse by topic.
▸ Pick a lane · click a card to filter
Latest drop.
▸ Most recent · or pinned by hand
MCP auth and audit logging in a Laravel SaaS
An MCP server on Laravel is only as safe as its tenancy boundary. Scoped tool auth, request-bound actor context, and an audit log you can actually read at 3am.
Read post →
More posts.
▸ 9 of 72 · paginated below
-
AITrust is not a QA strategy: test AI code too
AI code is 95% syntactically clean and fails security tests 45% of the time. Half of agentic PRs ship no tests. The verification pipeline I run instead.
Read post →
-
ShopifyBuilding secure agentic commerce on Shopify in 2026
How agentic commerce on Shopify stays safe: UCP negotiation, an MCP governance layer, scoped credentials, signed requests, and human approval at checkout.
Read post →
-
ArchitectureMCP vs A2A vs ACP: the agent protocol stack
MCP connects agents to tools, A2A connects agents to each other, and ACP has folded into A2A. How the two-layer agent protocol stack fits together in 2026.
Read post →
-
LaravelIdempotency keys for MCP mutations in Laravel
Refunds, seat resets, and password emails need more than audit logging. Client-supplied idempotency keys, server-side short-circuits, and race-safe storage under Octane.
Read post →
-
DevOpsCoolify in 2026: 60k GitHub stars and the self-hosted PaaS bet
Coolify crossed 60k GitHub stars. What that buys you, how it really compares to Dokploy, CapRover and Dokku, and the firewall claim to ignore.
Read post →
-
AIAI coding is like an addiction (in the best way)
A level-by-level map of the AI coding workflow: gateway prompts, codebase RAG, then multi-agent orchestration over MCP — and why manual coding now drags.
Read post →
-
AIStop reading every line of AI-generated code
Line-by-line review breaks on agent-sized diffs. How I moved to specs, property tests, and a multi-agent review pipeline — and the 3% I still read.
Read post →
-
AIVibe coding vs agentic engineering: which ships?
Vibe coding is for prototypes, agentic engineering is for production. The daily split I use to ship AI-written code without hidden technical debt.
Read post →
-
ArchitectureModular monoliths first: why microservices can wait
Distributed systems are the priciest fix for a problem you don't have. How to build a modular monolith, own data per module, and know when to split.
Read post →
Tags.
▸ Search by specific tech