Writing

An AI-written fallback defaulted unknown values to the first item in a list, and confidently ranked the wrong song. Nothing errored, nothing logged — which made it worse than a crash.

• Applied AI
• Guardrails
• Claude API
• Python

Long-lived IAM keys in CI are the single easiest credential to leak. Here's the trust policy, the role scoping, and the two mistakes that cost me an afternoon.

• AWS
• OIDC
• IAM
• GitHub Actions

Signing images is the easy half. The value only arrives when the cluster refuses to run anything unsigned — which is where most tutorials stop.

• Cosign
• Sigstore
• SBOM
• Kubernetes

Terraform-provisioned EKS, autoscaler deployed with Helm, then load-tested until nodes genuinely scale in and out.

• EKS
• Terraform
• Helm
• Autoscaling

The same GitOps pattern on Azure — proof that the delivery model transfers even when the pipeline doesn't.

• AKS
• ACR
• Jenkins
• Argo CD

A native AWS CI/CD path onto EKS, with the build and deploy stages wired together end to end.

• CodePipeline
• EKS
• Docker
• CI/CD

Containerising a real-estate web app and shipping it to a managed DOKS cluster with Helm and GitHub Actions.

• DOKS
• Django
• Helm
• GitHub Actions

One module set, an isolated stack per tenant — onboarding a new state becomes a variable change rather than a new codebase.

• Terraform
• AWS
• Multi-tenancy
• DynamoDB

Standing up a self-hosted Jenkins properly — TLS termination, reverse proxy config, and the tooling setup that follows.

• Jenkins
• Nginx
• SSL
• DigitalOcean