Notes from the backend.

RAG on DynamoDB, and Why We Didn't Pick pgvector

The short version: we picked a vector store on delete semantics and tenancy, not on search quality — plus a quick tour of keyword vs semantic vs hybrid retrieval.

One Nodepool for Everything Was Costing Us Money

Splitting prod and staging onto separate EKS nodepools, then scaling staging to zero outside office hours with kube-downscaler — and the three things that fight you when you try.

AI Stuff Part 1

The whole modern AI stack in plain English — next-token prediction, tokens, transformers, context windows, RAG, tools, agents, and MCP — with diagrams and interactive demos.

Kubernetes Admission Controllers

What admission controllers are, where they sit in the API server request flow, and how to build your own validating webhook.

OAuth Demystified

A practical walk through OAuth 2.0 — components, flow, scopes, OIDC, and why the Authorization Code grant is the one to reach for.

A new home for the writing

I rebuilt the site. Here's what's different and what I plan to write about.