Field Notes

Technical analysis and real-world experience reports on AI, cloud, security, and software engineering in production.

Jul 24, 20268 min read

Deploying an Autonomous AI Agent in Production: Hermes Agent Retrospective

Hardened security migration, Telegram gateway, web UI, automated remote backups — the complete log of a self-hosted agent deployment.

AIDevOpsAgentsSecurityDocker

Read

Jul 21, 20267 min read

Deploying n8n in Production on a Shared VPS: Field Retrospective

How I self-hosted n8n on a production VPS without breaking anything: Docker isolation, Nginx reverse proxy, HTTPS, and real-world debugging lessons.

DevOpsDockerAutomationn8nInfrastructure

Read

Jul 12, 20266 min read

Application Prompt Injection: Securing an MCP Agent with DB Access

How to protect an autonomous agent using the Model Context Protocol (MCP) from executing malicious direct queries on your PostgreSQL/MySQL databases.

AISecuritySQL

Read

Jun 28, 20265 min read

Why My LangGraph Agent Destroyed 48h of Staging Data

A post-mortem on an infinite agent decision loop that cleared our staging tables. Deep dive into the loop failure mode and how we set up isolation barriers.

AIDevOpsPostgreSQL

Read

May 15, 20265 min read

Anatomy of a Double Billing: Concurrency & SQL Transactions

How two simultaneous payment requests bypassed our application layer validation, the real production cost, and implementing lockForUpdate() row locks.

SoftwareSQLFintech

Read

Apr 10, 20266 min read

Why I Refused to Split This Laravel Monolith — The ADR

An architectural case study: why moving to microservices would have slowed down shipping, and how we structured a high-performing modular monolith instead.

SoftwareArchitecture

Read

Mar 5, 20267 min read

MPLS to Hybrid Cloud Migration: A 6-Month Log From Douala

Lessons learned interconnecting remote branch offices in Cameroon, managing MPLS latency, IPSec VPN failovers, and transitioning to Azure.

CloudNetworkField

Read

Feb 18, 20266 min read

Offline-First with 60% Network SLA: What the Docs Don't Tell You

Designing resilient data sync for field agents operating in low-connectivity areas. Conflict resolution strategies and local embedded databases.

SoftwareMobileField

Read

Jan 22, 20265 min read

SSRF via Webhook: How an HTTP Handler Almost Exposed Our Private Network

Technical walkthrough of a Server-Side Request Forgery vulnerability found on an integration service, and the IP and DNS level mitigations deployed.

SecurityNetwork

Read

Dec 10, 20257 min read

Fintech Security Audit: Insights from 3 Days of Offensive Testing

What I uncovered auditing a transactional API in Central Africa: logical bypasses, SQL injections, and broken object-level authorization (BOLA) defects.

SecurityFintechAudit

Read