https://saguaro.cloud/notes/ What we learned on specific projects, written for engineers who want the idea rather than the case study. en Thu, 16 Jul 2026 00:00:00 GMT https://saguaro.cloud/notes/claude-on-vertex-region-pinning/ https://saguaro.cloud/notes/claude-on-vertex-region-pinning/ Thu, 16 Jul 2026 00:00:00 GMT Claude-on-Vertex serves from only a few regions; rarely the one hosting your agent. Pin conditionally, and return a model object so the registry's regex resolution gets out of the way. vertex-ai claude model-serving google-adk region-pinning https://saguaro.cloud/notes/paved-road-for-ai-agents/ https://saguaro.cloud/notes/paved-road-for-ai-agents/ Thu, 09 Jul 2026 00:00:00 GMT Treat agent delivery like any other production system; a scaffold-to-deploy golden path, tool connections that degrade instead of crashing the turn, and secrets tied to per-agent identity. agentic-ai platform-engineering internal-developer-platform mcp reliability https://saguaro.cloud/notes/fail-closed-database-tls/ https://saguaro.cloud/notes/fail-closed-database-tls/ Tue, 23 Jun 2026 00:00:00 GMT Most drivers default to no encryption and managed databases rarely force it, so a missing connection-string parameter connects in the clear with no error; refuse to boot without verified TLS, and prove it by reading the negotiated cipher. tls database-security fail-closed go transport-security https://saguaro.cloud/notes/honest-per-environment-scoring/ https://saguaro.cloud/notes/honest-per-environment-scoring/ Wed, 20 May 2026 00:00:00 GMT A `**/production/**` glob that quietly swallows a sandbox nested under production, and why you should compute the criteria that don't vary once instead of faking N independent audits. per-environment-scoring configuration globbing sre-tooling go https://saguaro.cloud/notes/ephemeral-jobs-as-transport/ https://saguaro.cloud/notes/ephemeral-jobs-as-transport/ Tue, 04 Nov 2025 00:00:00 GMT When a reachability test only means something from the real source network, ship the probe as a throwaway Kubernetes Job and read the answer out of the pod's logs. kubernetes networking go platform-engineering jobs https://saguaro.cloud/notes/rolling-window-metrics/ https://saguaro.cloud/notes/rolling-window-metrics/ Mon, 20 Oct 2025 00:00:00 GMT Why "total raised" is uncomputable from a feed that only ever shows you the last 31 days, and what to report instead. rolling-window data-modeling metrics observability typescript