@ahmetcantryk
8 min read
Secrets Management in the Cloud, Done Right
Your .env file is a breach waiting to happen. Here is how SOPS, HashiCorp Vault, and dynamic short-lived credentials fix that the right way.
Tag
Your .env file is a breach waiting to happen. Here is how SOPS, HashiCorp Vault, and dynamic short-lived credentials fix that the right way.
July 2026: Claude Code Auto Mode is a classifier layer where a second Claude instance approves tool calls in real time. v2.1.207 widened its reach.
One ALTER TABLE locked a production table for minutes. Here's the expand-contract pattern, batched backfills, and CREATE INDEX CONCURRENTLY done right.
AI Now Institute's Friendly Fire proof-of-concept turns Claude Code's auto-mode security scan into a remote code execution vector for attackers.
Most feature flag systems calcify into permanent debt. Here's how flag types, clear ownership, expiry dates, and a cleanup workflow can prevent that.
A downstream dependency slowed down for 90 seconds — our retry logic took it down completely. Here's what jittered backoff actually prevents, and why.
A payment request timed out, the mobile app retried automatically, and the customer got charged twice. Here's how idempotency keys and UPSERT prevent that.
The story of rebuilding a broken signup form with React Hook Form and Zod: schema validation, onBlur mode, aria-invalid, role=alert, and server-side reuse.
A shippable LLM guardrails checklist spanning input, model, output, and action layers, with pass/fail tests for each control. Field notes from production.