Platform engineering, identity & applied AI.
I set technical direction for Sky's multi-tenant AdTech platform and the Applied AI that runs on it. Previously Co-Founder & Head of Engineering at Syntonym; privacy / GAN anonymisation on cloud + edge GPU. On the side I'm building Life sciences with Applied AI for healthcare at Asklepion Health.
Start here
Not the newest. The ones I'd hand a senior engineer first.
Authentication 101: A Complete Guide to Modern Identity Methods
Authentication gets easier when you separate login, delegated access, SSO, and workload identity. This guide shows where each one fits.
22 minObserving LLM Inference: The Metrics That Actually Matter
TTFT is your SLO, not throughput. Here is what to measure for LLM inference, and what Google ADK, LangChain, and LangGraph give you out of the box.
8 minField notes
Short-form: the gotchas and configs worth keeping, logged before they're forgotten.
kubectl can sort by anything in the object
Stop eyeballing pod age. --sort-by takes any JSONPath, so you can rank by restart count and surface the flapping pod immediately.
Go 1.22's http.ServeMux finally does method routing
You can drop the third-party router for most services now. mux.HandleFunc("POST /items/{id}", h) gives you path params and method matching in the standard library — one fewer dependency to patch.
Workload Identity beats a mounted key, even for "just a cron"
If a job touches a cloud API, it can use federation. There's no traffic too small to justify a long-lived service-account key sitting on disk waiting to leak. The cron is exactly the thing nobody rotates.
The fastest observability win is one well-placed exemplar
Trace exemplars on your latency histogram turn "p99 is bad" into "here's the exact slow request." Wire them before you add another dashboard nobody reads.