Engineering Notes
Technical write-ups from real engagements: HIPAA-compliant architecture, serverless AWS infrastructure, payment systems, authentication, databases, and the integrations that hold production systems together. Written for the engineers and founders deciding whether to build it themselves.
The sprawl critique is right — dozens of repos, duplicated logic, nobody owns the map. But collapsing back to one deployable just trades that for a single point of failure. The fix is a handful of services, not zero and not forty.
READ ARTICLEBefore the next $60,000 hire, ask what the current team actually does all day. Often it's not a staffing problem — it's an integration problem wearing a job description.
READ ARTICLEA spreadsheet or Access database can run a business surprisingly well — until the business depends on it more than the file was ever designed to handle. Where that threshold actually is, and what should replace it.
READ ARTICLEA working demo proves the idea, not that it's safe to run. Why a prototype needs a human who can architect and review what AI never did, before real users and real money touch it.
READ ARTICLESoftware development was never just typing syntax. AI automated the part of the job that made a code-camp grad and a software engineer look interchangeable.
READ ARTICLEWordPress isn't HIPAA compliant out of the box, but it can be made appropriate for the right use case — and when a patient portal has outgrown it entirely.
READ ARTICLEA timed algorithm puzzle measures recall under pressure on an invented problem. Senior engineering is planning and judgment on real ones — a good tool for hiring juniors, the wrong one for hiring seniors.
READ ARTICLEWhy unit tests matter more once an LLM is writing the code — a separate agent should write them, coverage should target risk over raw percentage, and failure paths need testing too.
READ ARTICLEWhy every vendor touching PHI needs a signed BAA, how encryption and PHI/non-PHI separation work in practice, what a breach actually costs, and the trade-offs of leaning on third parties for compliance.
READ ARTICLEWooCommerce checkout needs outbound internet for Stripe and order email — how a second, non-VPC Lambda solves that without paying for a NAT Gateway.
READ ARTICLEHow the Acme Widgets demo storefront gets real full-text product search from SQLite's built-in FTS5 extension instead of an Algolia or Elasticsearch subscription.
READ ARTICLEStrava's free API got paywalled and Garmin's own API can't get past MFA on an unattended schedule — how a delegated-auth relay solved it instead of bypassing 2FA.
READ ARTICLEA real, live storefront compared against Shopify and other hosted platforms on recurring cost and how far you can customize before hitting a wall.
READ ARTICLEA real WordPress install on Lambda with SQLite instead of RDS and no NAT Gateway — how the architecture works and what it actually costs.
READ ARTICLEA decision guide for teams comparing custom software with SaaS tools, spreadsheets, and one-off integrations.
READ ARTICLEExamples of practical automation projects that reduce admin time, improve follow-up, and make existing systems work together.
READ ARTICLEHow custom integrations connect Shopify, hosted storefronts, supplier feeds, fulfillment updates, and tracking to reduce manual work and costly errors.
READ ARTICLE