Journal · 6 entries
Engineering journal
Practical notes from building platform systems, coding-agent tooling, and engineering teams.
The One-Byte Bug: Why Go's HTTP Client Silently Stopped Reusing Connections
A function that only reads a status code was secretly opening a new TCP and TLS connection on every call. Here is why HTTP/1 made that unavoidable through Go 1.26, what Go 1.27 changed, and a benchmark that proves it.
Deploy on GitHub Release with a Kubernetes Operator (Helm + KEDA)
Build a Go operator with Operator SDK that rolls a Deployment to each new GitHub release without fighting Helm or KEDA. Tested on kind, failures included.
Two Servers, One Secret: Envelope Encryption Inside Nitro Enclaves with KMS
A hands-on tutorial: send a message between two servers so that only a specific, measured enclave on the receiving side can ever read it, using AES-GCM, RSA keys in KMS, and an attestation document.
Migrating a Monolith to ECS Microservices with Zero Client Changes
How we split a 24+ module Spring Boot monolith into independently deployable AWS ECS Fargate services behind Traefik, using transparent path rewrites, promotion gates, and a planned 308 retirement of legacy routes.
Whose Identity Does the Tool See? Authenticating MCP in Production
Four ways to decide which identity sits behind an agent's tool call on Kubernetes, what each one costs, and how to layer them.
MemLore vs SDD: When to Choose What
A story about the wrong patch that looked right, the specs you already wrote, and the runtime layer that helps coding agents load governed why.