-
Cloud 3.0 and Geopatriation

To understand where cloud is going in 2026, it helps to see where it’s been — because the change underway is a genuine paradigm shift, not an incremental one. Cloud 1.0 — migration. Organisations moved to the cloud to shed the “undifferentiated heavy lifting” of managing hardware. The question was simply can we run this in the cloud? — lift-and-shift, IaaS, someone else’s servers. Cloud 2.0 — cloud-native. The era of “cloud first.” Teams rebuilt around managed services, autoscaling, and the seemingly infinite capacity of a handful of hyperscalers. The question became how fast can we scale? Concentration on a… Go to Post
-
Javascript LevelUp – Day 03/60

You’ve written JavaScript for years. This 60-day program reforges that experience for 2026 — modern JS and TypeScript, the frameworks that matter now, and the AI-engineering skills that separate senior developers from the pack. Written for mid-level and senior developers (not beginners), this is a structured, day-by-day program that upgrades your JavaScript craft across the whole stack — and adds the one thing most JS developers are still missing: real AI-engineering ability, in the language you already know. • Don’t want to wait for the next post? Want to go faster? Buy the full book now! Go to Post
-
Digital Provenance as a Trust and Compliance Requirement

For most of computing history, trust was implicit. You installed the package from npm because it was on npm. You believed the photo in your feed because photos were hard to fake convincingly. You trusted the data in your warehouse because someone you knew had loaded it. None of that trust was verified — it was assumed, because forging the alternative was expensive or obvious. That assumption has collapsed on three fronts simultaneously, and the collapse is why digital provenance — the verifiable record of a digital asset’s origin, authorship, modifications, and chain of custody — has gone from a… Go to Post
-
Pre-emptive Cybersecurity

Security has one brutal piece of arithmetic at its core: defenders must be right every time; attackers only need to be right once. For decades the response to that asymmetry was reactive — build taller walls, install faster alarms, and when something gets through, detect and respond. Detection-and-response (D&R) is the model that gave us SIEMs, SOCs, EDR, and the entire incident-response playbook. It works by waiting for an attack to begin, then reacting. In 2026, that model is buckling, and the reason is speed. Machine-speed attacks broke the reactive window The reactive model depends on a window: the time… Go to Post
-
Javascript LevelUp – Day 02/60

You’ve written JavaScript for years. This 60-day program reforges that experience for 2026 — modern JS and TypeScript, the frameworks that matter now, and the AI-engineering skills that separate senior developers from the pack. Written for mid-level and senior developers (not beginners), this is a structured, day-by-day program that upgrades your JavaScript craft across the whole stack — and adds the one thing most JS developers are still missing: real AI-engineering ability, in the language you already know. • Don’t want to wait for the next post? Want to go faster? Buy the full book now! Go to Post
-
New AI-Era Attack Vectors

For years the most effective attackers have avoided bringing malware at all. Why smuggle in a payload your EDR will flag when the target machine already ships with everything you need? This is living off the land (LOTL): abusing legitimate, pre-installed tools — PowerShell, WMI, signed system binaries (“LOLBins”) — to operate. Because the tools are allowlisted and the activity looks normal, LOTL leaves no malware signature and blends into routine operations. By 2023, CrowdStrike reported that roughly 6 in 10 detections involved LOTL techniques rather than traditional malware. It works because the safest tool to attack with is one… Go to Post
-
Securing the Agent Harness

Start with a number. An agent that opens 1,000 pull requests a week at a 1% vulnerability rate ships 10 new vulnerabilities every week — quietly, confidently, indefinitely. That’s the uncomfortable arithmetic of autonomy: a small per-action error rate, multiplied by machine-speed volume, becomes a steady stream of security holes. A human writing ten PRs a day can’t produce vulnerabilities fast enough to matter at that scale. An agent fleet can. This reframes the whole problem. Security for AI agents isn’t a model-quality question you can solve with a better prompt. It’s a systems question, and the answer to “how… Go to Post
-
Javascript LevelUp – Day 01/60

You’ve written JavaScript for years. This 60-day program reforges that experience for 2026 — modern JS and TypeScript, the frameworks that matter now, and the AI-engineering skills that separate senior developers from the pack. Written for mid-level and senior developers (not beginners), this is a structured, day-by-day program that upgrades your JavaScript craft across the whole stack — and adds the one thing most JS developers are still missing: real AI-engineering ability, in the language you already know. • Don’t want to wait for the next post? Want to go faster? Buy the full book now! Go to Post
-
Extension Methods and Extension Members in C#

Why This Matters When AI Can Just Write the Code An AI assistant can generate an extension method for you in seconds — a one-liner with this in front of the first parameter, done. So why does the underlying concept deserve real understanding rather than just trusting the generated snippet? Because extension methods are one of the easiest C# features to use incorrectly while still having it compile and appear to work, and the failure modes are exactly the kind that only show up once real usage patterns emerge — not in the small demo an AI tool shows you.… Go to Post
-
Interfaces, Inheritance, and Composition — How C# Types Share Behaviour

Why This Matters When AI Can Just Write the Code An AI assistant can generate an interface, a base class, or a composed object graph in seconds — so why does understanding the underlying design tradeoffs still matter? Because generating code that compiles is not the same as generating code that will still be healthy to work with a year from now, and the choices this post covers — interface vs. base class, inheritance vs. composition — are exactly the kind of decision an AI tool cannot reliably make correctly on your behalf, because making it well requires knowing things about your… Go to Post
-
Null, not null, forgiving null (or maybe not)

Why This Matters When AI Can Just Write the Code An AI assistant can generate null checks in seconds — so why does understanding null handling matter if you can just ask for it? Because null-related bugs are almost never caught by generating code; they’re caught by reading code and recognising a gap in its reasoning, and that’s a skill no amount of code generation substitutes for. Here’s a concrete version of the problem: an AI tool asked to fix a compiler warning about a possibly-null reference will very often reach for the null-forgiving operator (!) — it makes the… Go to Post
-
C# class vs record vs struct vs record struct

Why This Matters When AI Can Just Write the Code It’s a fair question: if you can ask an AI assistant to generate a class, a record, or a struct in seconds, why spend time learning the difference yourself? An AI tool will happily generate any of the four — a class when you needed a record, a mutable record struct when you needed a readonly one, a struct the size of a small database row when a class would have been far cheaper to pass around. It will do this confidently and without warning you, because generating syntactically valid… Go to Post
-
Why Agentic Projects Fail

Almost everything written about agentic AI is a showroom: the demo that dazzled, the workflow that now runs itself. This article is the morgue. Because the most useful thing you can study before building an agentic system isn’t the success stories — it’s the autopsies. And there are a lot of bodies. The headline number is Gartner’s, from June 2025: over 40% of agentic AI projects will be cancelled by the end of 2027 — not scaled back, not pivoted, cancelled — citing escalating costs, unclear business value, and inadequate risk controls. It’s not a speculative warning; Gartner frames it… Go to Post
-
How Can AI Help My Business?

If you run a small business and you’ve been wondering whether this whole AI thing is for you, here’s the honest state of play in 2026: most of your peers have already started. Depending on which survey you read, somewhere between 82% and 89% of small businesses now use AI in some form — up from roughly a third just three years ago. The U.S. Chamber of Commerce found small firms adopting AI faster than large companies for the first time in the data’s history. But that headline hides the part that should reassure you. When researchers look at who’s… Go to Post
-
The Senior Developer Bar in 2026

A lot of my posts are about how to build with AI — agents, orchestration, the Microsoft stack, the protocols. This series steps up a level and asks a harder question aimed squarely at senior and lead developers: in mid-2026, what actually makes you valuable? Because the answer has moved, and a lot of people haven’t noticed. The bar is no longer “I integrated an LLM” Two years ago, wiring an LLM into a product was a differentiator. You could stand up in a review, show a feature that called a model, and that was the value. In mid-2026 that’s… Go to Post
-
Free Mini-Course: FND-101 AI Foundations for Practitioners

Modern AI has its own concepts, vocabulary, and ways of working that are unfamiliar even to experienced engineers. This course is the technical front door to the catalogue: it gives practitioners the grounding they need before entering any of the intermediate and advanced tracks, so they are not learning fundamentals and specifics at the same time.Students build an accurate mental model of what today’s AI is, how language models behave, what the application landscape looks like, and how quality and responsibility are handled. The emphasis is on genuine understanding rather than hype or hand-waving.Labs are gentle, guided exercises that let… Go to Post



