• Cloud 3.0 and Geopatriation

    Cloud 3.0 and Geopatriation

    To understand where cloud is going in 2026, it helps to see where it’s been — because the change underway is a genuine paradigm shift, not an incremental one. Cloud 1.0 — migration. Organisations moved to the cloud to shed the “undifferentiated heavy lifting” of managing hardware. The question was simply can we run this in the cloud? — lift-and-shift, IaaS, someone else’s servers. Cloud 2.0 — cloud-native. The era of “cloud first.” Teams rebuilt around managed services, autoscaling, and the seemingly infinite capacity of a handful of hyperscalers. The question became how fast can we scale? Concentration on a… Go to Post

  • Javascript LevelUp – Day 03/60

    Javascript LevelUp – Day 03/60

    You’ve written JavaScript for years. This 60-day program reforges that experience for 2026 — modern JS and TypeScript, the frameworks that matter now, and the AI-engineering skills that separate senior developers from the pack. Written for mid-level and senior developers (not beginners), this is a structured, day-by-day program that upgrades your JavaScript craft across the whole stack — and adds the one thing most JS developers are still missing: real AI-engineering ability, in the language you already know. • Don’t want to wait for the next post? Want to go faster? Buy the full book now! Go to Post

  • Digital Provenance as a Trust and Compliance Requirement

    Digital Provenance as a Trust and Compliance Requirement

    For most of computing history, trust was implicit. You installed the package from npm because it was on npm. You believed the photo in your feed because photos were hard to fake convincingly. You trusted the data in your warehouse because someone you knew had loaded it. None of that trust was verified — it was assumed, because forging the alternative was expensive or obvious. That assumption has collapsed on three fronts simultaneously, and the collapse is why digital provenance — the verifiable record of a digital asset’s origin, authorship, modifications, and chain of custody — has gone from a… Go to Post

  • Pre-emptive Cybersecurity

    Pre-emptive Cybersecurity

    Security has one brutal piece of arithmetic at its core: defenders must be right every time; attackers only need to be right once. For decades the response to that asymmetry was reactive — build taller walls, install faster alarms, and when something gets through, detect and respond. Detection-and-response (D&R) is the model that gave us SIEMs, SOCs, EDR, and the entire incident-response playbook. It works by waiting for an attack to begin, then reacting. In 2026, that model is buckling, and the reason is speed. Machine-speed attacks broke the reactive window The reactive model depends on a window: the time… Go to Post

  • Javascript LevelUp – Day 02/60

    Javascript LevelUp – Day 02/60

    You’ve written JavaScript for years. This 60-day program reforges that experience for 2026 — modern JS and TypeScript, the frameworks that matter now, and the AI-engineering skills that separate senior developers from the pack. Written for mid-level and senior developers (not beginners), this is a structured, day-by-day program that upgrades your JavaScript craft across the whole stack — and adds the one thing most JS developers are still missing: real AI-engineering ability, in the language you already know. • Don’t want to wait for the next post? Want to go faster? Buy the full book now! Go to Post

  • New AI-Era Attack Vectors

    New AI-Era Attack Vectors

    For years the most effective attackers have avoided bringing malware at all. Why smuggle in a payload your EDR will flag when the target machine already ships with everything you need? This is living off the land (LOTL): abusing legitimate, pre-installed tools — PowerShell, WMI, signed system binaries (“LOLBins”) — to operate. Because the tools are allowlisted and the activity looks normal, LOTL leaves no malware signature and blends into routine operations. By 2023, CrowdStrike reported that roughly 6 in 10 detections involved LOTL techniques rather than traditional malware. It works because the safest tool to attack with is one… Go to Post

  • Securing the Agent Harness

    Securing the Agent Harness

    Start with a number. An agent that opens 1,000 pull requests a week at a 1% vulnerability rate ships 10 new vulnerabilities every week — quietly, confidently, indefinitely. That’s the uncomfortable arithmetic of autonomy: a small per-action error rate, multiplied by machine-speed volume, becomes a steady stream of security holes. A human writing ten PRs a day can’t produce vulnerabilities fast enough to matter at that scale. An agent fleet can. This reframes the whole problem. Security for AI agents isn’t a model-quality question you can solve with a better prompt. It’s a systems question, and the answer to “how… Go to Post

  • Javascript LevelUp – Day 01/60

    Javascript LevelUp – Day 01/60

    You’ve written JavaScript for years. This 60-day program reforges that experience for 2026 — modern JS and TypeScript, the frameworks that matter now, and the AI-engineering skills that separate senior developers from the pack. Written for mid-level and senior developers (not beginners), this is a structured, day-by-day program that upgrades your JavaScript craft across the whole stack — and adds the one thing most JS developers are still missing: real AI-engineering ability, in the language you already know. • Don’t want to wait for the next post? Want to go faster? Buy the full book now! Go to Post

  • RAG for Knowledge-Grounded Agents

    RAG for Knowledge-Grounded Agents

    An ungrounded agent is a confident liar. Ask it about your company’s refund policy, last quarter’s numbers, or a customer’s order history, and it will produce a fluent, plausible, well-structured answer — drawn from its training data, its priors, or nothing at all. The words are right; the facts may be invented. That’s the hallucination problem, and it’s the single biggest barrier between a demo and a system you’d let talk to customers. Retrieval-Augmented Generation (RAG) is the answer the industry converged on, and in 2026 it’s the default architecture for any agent that needs to answer from private or… Go to Post

  • Extension Methods and Extension Members in C#

    Extension Methods and Extension Members in C#

    Why This Matters When AI Can Just Write the Code An AI assistant can generate an extension method for you in seconds — a one-liner with this in front of the first parameter, done. So why does the underlying concept deserve real understanding rather than just trusting the generated snippet? Because extension methods are one of the easiest C# features to use incorrectly while still having it compile and appear to work, and the failure modes are exactly the kind that only show up once real usage patterns emerge — not in the small demo an AI tool shows you.… Go to Post

  • Interfaces, Inheritance, and Composition — How C# Types Share Behaviour

    Interfaces, Inheritance, and Composition — How C# Types Share Behaviour

    Why This Matters When AI Can Just Write the Code An AI assistant can generate an interface, a base class, or a composed object graph in seconds — so why does understanding the underlying design tradeoffs still matter? Because generating code that compiles is not the same as generating code that will still be healthy to work with a year from now, and the choices this post covers — interface vs. base class, inheritance vs. composition — are exactly the kind of decision an AI tool cannot reliably make correctly on your behalf, because making it well requires knowing things about your… Go to Post

  • Null, not null, forgiving null (or maybe not)

    Null, not null, forgiving null (or maybe not)

    Why This Matters When AI Can Just Write the Code An AI assistant can generate null checks in seconds — so why does understanding null handling matter if you can just ask for it? Because null-related bugs are almost never caught by generating code; they’re caught by reading code and recognising a gap in its reasoning, and that’s a skill no amount of code generation substitutes for. Here’s a concrete version of the problem: an AI tool asked to fix a compiler warning about a possibly-null reference will very often reach for the null-forgiving operator (!) — it makes the… Go to Post

  • C# class vs record vs struct vs record struct

    C# class vs record vs struct vs record struct

    Why This Matters When AI Can Just Write the Code It’s a fair question: if you can ask an AI assistant to generate a class, a record, or a struct in seconds, why spend time learning the difference yourself? An AI tool will happily generate any of the four — a class when you needed a record, a mutable record struct when you needed a readonly one, a struct the size of a small database row when a class would have been far cheaper to pass around. It will do this confidently and without warning you, because generating syntactically valid… Go to Post

  • Why Agentic Projects Fail

    Why Agentic Projects Fail

    Almost everything written about agentic AI is a showroom: the demo that dazzled, the workflow that now runs itself. This article is the morgue. Because the most useful thing you can study before building an agentic system isn’t the success stories — it’s the autopsies. And there are a lot of bodies. The headline number is Gartner’s, from June 2025: over 40% of agentic AI projects will be cancelled by the end of 2027 — not scaled back, not pivoted, cancelled — citing escalating costs, unclear business value, and inadequate risk controls. It’s not a speculative warning; Gartner frames it… Go to Post

  • Free Booklet: Claude AI The Complete Guide

    Free Booklet: Claude AI The Complete Guide

    Anthropic ships major Claude updates almost weekly, which makes staying current with the platform a genuine full-time problem — even the best deep-dive guides go stale within weeks of publication. Claude AI: The Complete Guide solves that by treating currency as a feature: every pricing figure, benchmark, and model spec is timestamped, every correction from prior editions is called out explicitly rather than quietly fixed, and this August 2026 revision covers everything from the new Claude Opus 5 to the Fable 5/Mythos 5 export-control saga that briefly took two flagship models offline worldwide. Whether you’re writing your first API call… Go to Post

  • Multi-Agent Orchestration: From One Agent to Many (and When Not To)

    Multi-Agent Orchestration: From One Agent to Many (and When Not To)

    You start with one coding assistant and it’s great. So you add a second agent to review the first. Then a planner. Then a tester. Each addition feels reasonable, and somewhere around the fourth one the system starts to wobble: the logs balloon, the agents make contradictory decisions, costs spike, and you’re back babysitting it at 2 a.m. wondering whether all this orchestration actually bought you anything. That tension — more power versus more pain — produced one of 2025’s sharpest engineering disagreements. On June 12, Cognition (the team behind Devin) published “Don’t Build Multi-Agents,” arguing that parallel subagents make… Go to Post

  • How Can AI Help My Business?

    How Can AI Help My Business?

    If you run a small business and you’ve been wondering whether this whole AI thing is for you, here’s the honest state of play in 2026: most of your peers have already started. Depending on which survey you read, somewhere between 82% and 89% of small businesses now use AI in some form — up from roughly a third just three years ago. The U.S. Chamber of Commerce found small firms adopting AI faster than large companies for the first time in the data’s history. But that headline hides the part that should reassure you. When researchers look at who’s… Go to Post

  • AI Slop & Review at Scale

    AI Slop & Review at Scale

    Sonar’s 2026 State of Code Developer Survey put a hard figure on a feeling every engineer already had: 96% of developers don’t fully trust that AI-generated code is functionally correct. That’s the stat that made headlines. But the more revealing one sits right next to it: only 48% always verify AI code before committing. Sit with that gap. Nearly everyone distrusts the output, and barely half consistently check it. Sonar calls the space between those numbers the verification gap — and AWS CTO Werner Vogels gave the accumulating consequence a name at re:Invent in December 2025: verification debt. The pressure… Go to Post

  • The Senior Developer Bar in 2026

    The Senior Developer Bar in 2026

    A lot of my posts are about how to build with AI — agents, orchestration, the Microsoft stack, the protocols. This series steps up a level and asks a harder question aimed squarely at senior and lead developers: in mid-2026, what actually makes you valuable? Because the answer has moved, and a lot of people haven’t noticed. The bar is no longer “I integrated an LLM” Two years ago, wiring an LLM into a product was a differentiator. You could stand up in a review, show a feature that called a model, and that was the value. In mid-2026 that’s… Go to Post

  • Free Mini-Course: FND-101 AI Foundations for Practitioners

    Free Mini-Course: FND-101 AI Foundations for Practitioners

    Modern AI has its own concepts, vocabulary, and ways of working that are unfamiliar even to experienced engineers. This course is the technical front door to the catalogue: it gives practitioners the grounding they need before entering any of the intermediate and advanced tracks, so they are not learning fundamentals and specifics at the same time.Students build an accurate mental model of what today’s AI is, how language models behave, what the application landscape looks like, and how quality and responsibility are handled. The emphasis is on genuine understanding rather than hype or hand-waving.Labs are gentle, guided exercises that let… Go to Post