Development & Technology28 articles
Architecture, implementation, authentication, and operations. Articles to inform critical decisions in development.
Stricter Access service tokens: conditions under which automated jobs stop
Cloudflare Tunnel URL normalization: check setups that protect only the admin panel
A single entry point for internal MCP servers: MCP server portals
Before Moving Passkeys on Android — Verification for Switching Password Managers
Why does changing a login flow require three separate releases?
Moving beyond the binary choice of accepting or declining all app permission requests
Stop building custom login screens for internal tools: consolidate authentication into Google Workspace
Written for readers a decade from now — Where to begin post-quantum cryptography migration
Having “Sign in with Google” Implemented for You — What to Look for During Acceptance Testing
AI Agent Approvals Provide No Safety Net: One in Three Overlooked
Production environment permissions left in contractor accounts — How to switch to "granting access only when needed"
Former employees' accounts were disabled, yet non-human IDs used by systems remain active
Before Claude Code spreads unchecked across your organization — Consolidating enterprise rollout with SSO, budget caps, and controls
How many service account keys have you distributed? The choice of keyless integrations
Before Connecting Internal AI Agents to Business Systems: Essentials of Permission Management (MCP Authorization)
Too many SaaS apps pushing login management to its limit: Centralizing SSO with Google Workspace as IdP through custom development
Before the CEO's Account Gets Taken Over — Two-Step Verification and Passkey Migration for SMEs
Is the inherited authentication code secure? Pitfalls of JWT verification middleware
Moving beyond login-only authorization: Continuous authorization design for sensitive custom systems
Designing authentication and authorization for AI agents — incorporating permissions and delegation into custom projects
Eliminating Manual SSH Execution on Production Servers — Building Auditable Job Execution Platforms in Custom Development
API Gateway Authorization Bypassed via Trailing Slash — API Authorization Security Audits for Client Systems 2026
The "stop storing JWTs in localStorage" debate: Security audits for web authentication implementations in client development
Supabase → Clerk → Better Auth — The 2026 Authentication Migration Playbook for Client Projects
Protecting custom MCP servers with OAuth 2.1 — authentication design for custom MCP integrations (2026)
Unified Secret Management for Humans and AI Agents Using HashiCorp Vault 2.0 and Identity Federation — Custom Design Guidelines (2026)
Who is covered by Android developer verification in September 2026? Checkpoints for enterprise apps
Showing 1–28 of 28 articles
Turning concepts into design.
Development Environment↔AI Models
Access Permissions · Data · Logs
Building an environment
to use AI internally
Internal data, development environments, and access permissions. Advancing adoption concepts into concrete technical reviews.
Compare approachesOrganize implementation requirementsTest on a small scale
Read feature 
Google Workspace
administration basics
Resolving administrator uncertainties from rollout to sharing and permissions.
Pricing & rolloutSharing rulesPermissions & security
Read feature 
Getting started with AI
at work
Selecting tasks to delegate, experimenting on a small scale, and operating safely.
How AI worksTesting in workflowsSafe usage
Read feature 
Looking back at
emergency vulnerability responses
PHP, certificates and Node.js. A record of the responses that overlapped on October 21–22, 2026, down to the steps we verified and the pitfalls we hit.
Checking providers' responsesInspecting certificates on devicesUpgrading multiple repositories at once
Read feature 
Improvement notebook for
growing your website
Forms, usability, and updates: tackling post-launch improvements one step at a time.
Form optimizationUI refinementsUpdates & operations
Read series