Development & Technology28 articles
Architecture, implementation, authentication, and operations. Articles to inform critical decisions in development.
Articles are ordered by popularity over the past 30 days.
A single entry point for internal MCP servers: MCP server portals
Before Moving Passkeys on Android — Verification for Switching Password Managers
AI Agent Approvals Provide No Safety Net: One in Three Overlooked
Unified Secret Management for Humans and AI Agents Using HashiCorp Vault 2.0 and Identity Federation — Custom Design Guidelines (2026)
Supabase → Clerk → Better Auth — The 2026 Authentication Migration Playbook for Client Projects
How many service account keys have you distributed? The choice of keyless integrations
Stop building custom login screens for internal tools: consolidate authentication into Google Workspace
Moving beyond login-only authorization: Continuous authorization design for sensitive custom systems
Before the CEO's Account Gets Taken Over — Two-Step Verification and Passkey Migration for SMEs
Too many SaaS apps pushing login management to its limit: Centralizing SSO with Google Workspace as IdP through custom development
Before Claude Code spreads unchecked across your organization — Consolidating enterprise rollout with SSO, budget caps, and controls
Protecting custom MCP servers with OAuth 2.1 — authentication design for custom MCP integrations (2026)
The "stop storing JWTs in localStorage" debate: Security audits for web authentication implementations in client development
API Gateway Authorization Bypassed via Trailing Slash — API Authorization Security Audits for Client Systems 2026
Eliminating Manual SSH Execution on Production Servers — Building Auditable Job Execution Platforms in Custom Development
Is the inherited authentication code secure? Pitfalls of JWT verification middleware
Before Connecting Internal AI Agents to Business Systems: Essentials of Permission Management (MCP Authorization)
Former employees' accounts were disabled, yet non-human IDs used by systems remain active
Having “Sign in with Google” Implemented for You — What to Look for During Acceptance Testing
Written for readers a decade from now — Where to begin post-quantum cryptography migration
Moving beyond the binary choice of accepting or declining all app permission requests
Why does changing a login flow require three separate releases?
Production environment permissions left in contractor accounts — How to switch to "granting access only when needed"
Designing authentication and authorization for AI agents — incorporating permissions and delegation into custom projects
Abuse of ConnectWise integration apps: logs to check in Microsoft 365
Stricter Access service tokens: conditions under which automated jobs stop
Cloudflare Tunnel URL normalization: check setups that protect only the admin panel
Showing 1–28 of 28 articles
Turning concepts into design.
Development Environment↔AI Models
Access Permissions · Data · Logs
Building an environment
to use AI internally
Internal data, development environments, and access permissions. Advancing adoption concepts into concrete technical reviews.
Compare approachesOrganize implementation requirementsTest on a small scale
Read feature 
Google Workspace
administration basics
Resolving administrator uncertainties from rollout to sharing and permissions.
Pricing & rolloutSharing rulesPermissions & security
Read feature 
Getting started with AI
at work
Selecting tasks to delegate, experimenting on a small scale, and operating safely.
How AI worksTesting in workflowsSafe usage
Read feature 
Looking back at
emergency vulnerability responses
PHP, certificates and Node.js. A record of the responses that overlapped on October 21–22, 2026, down to the steps we verified and the pitfalls we hit.
Checking providers' responsesInspecting certificates on devicesUpgrading multiple repositories at once
Read feature 
Improvement notebook for
growing your website
Forms, usability, and updates: tackling post-launch improvements one step at a time.
Form optimizationUI refinementsUpdates & operations
Read series