Perspectives on technology strategy, software engineering, and the craft of building things that last.
Software supply chain attacks stopped faking packages and started taking over real ones. Bitwarden, SAP, TanStack and Red Hat all shipped poisoned versions of their own npm packages in 2026. What it costs a business, and the eight controls that limit your exposure.
Before Nortis automates a process or upgrades an application, one to three weeks go into mapping how it actually works today. What happens in those weeks, what you get at the end, and why skipping it costs more than running it.
Vibe coding is the fastest way to validate an idea and a poor way to build something you intend to grow. What breaks when a prototype gets quietly promoted to a product, and what the rebuild actually costs.
A buyer's framework for deciding whether a custom AI agent workflow will pay back inside 12 months — and the honest cases where it won't.
A close look at the new managed agent layer that handles infrastructure so you can focus on what the agent actually does — and what it means for teams running on n8n, Zapier, or Make.
The forwards way to build software — design the API first, and every future requirement becomes an incremental addition, not a partial rewrite.
Technical debt is not a failure. It's a tool — one that lets you move fast when speed matters, at the cost of future flexibility.