ENGINEERING NOTES

Lessons from production.

Short, practical write-ups on performance, data architecture, API design, cloud infrastructure, and AI in real products. Each one reads in about a minute.

11 articles

MCPLLMsOpenRouter

Small AI models as classifiers, not chatbots

Using a schema-constrained model to pick the right query in an MCP tool, with permission-filtered options, keyword fallback and shadow-mode rollout.

API SecurityGraphQL

Access control belongs on the server

Why letting clients send their own filters breaks API security (OWASP API1/BOLA), and how to enforce entitlements in GraphQL.

ObservabilitySRE

Honest service-health reporting

Separating real failures from rejected calls, setting error budgets, and treating “found by the weekly report, not an alarm” as a finding in itself.