~/if.codes$ls posts/

Notes on building AI that actually works.

RAG and semantic search, LLM integrations, agent pipelines and the backends underneath — practical posts written while shipping.

⌘K

Work with meTaking projects

I build what I write about — RAG and semantic search, AI integrations and agent pipelines, on backends in Go and Python.

Free · no commitment · I read every request myself

Latest · AI integrationsOct 9, 2026 · 7 min read

The Durable Object alarm that cost $10,000: guarding setAlarm() loops with backoff, idempotency and a kill switch

Durable Object alarms are at-least-once, retried, and usually rescheduled from inside the handler, which makes a billing loop easy to write. Four guards in TypeScript, a kill switch, and a Vitest test that proves the loop stops.

#cloudflare#durable-objects#typescript#cost-controlRead the post

AI integrations

Oct 9, 2026 · 6 min readCounterfeit certs via hijacked ccTLDs: CAA with accounturi and a CT watch for your domains in 15 minutesAttackers took over the .gh, .sl and .as registries and got 12 valid certificates for Google domains. CAA would not have stopped the hijack. Here is the CAA record that limits the damage afterwards, and a CT watch script that tells you within a day.#tls#caa#certificate-transparency#dns

RAG & search

Oct 7, 2026 · 6 min readEmbeddingGemma 2 in Qdrant: one 740M model for text, images and audio, and what truncating 768 to 128 dims costs your recallGoogle's open multimodal embedder runs locally and truncates from 768 to 128 dims. Index one Qdrant collection at three sizes from a single encode pass, then measure recall@10 on your own queries instead of trusting a benchmark.#embeddings#qdrant#rag#open-models

AI integrations

Oct 6, 2026 · 5 min readStrict service token auth in Cloudflare Access: moving your scripts and CI over before it bitesCloudflare Access now has a strict mode for service tokens: 401/403 instead of a 302 to the login page, only Service Auth policies count, and no CF_Authorization cookie. New orgs get it forced on from 5 October. A 15-minute check and switch for existing orgs.#cloudflare#zero-trust#ci-cd#authentication

AI integrations

Oct 5, 2026 · 6 min readWhy was that request blocked? Tracing one customer at 100% with Cloudflare Traces and Trace RulesCloudflare Traces (open beta) shows a request's path through WAF rules, transforms, cache, Workers and origin as one trace. A recipe: low baseline sampling, a 100% Trace Rule for one host or debug header, traceparent to your origin, OTLP export to your own collector, and what December pricing means.#cloudflare#observability#opentelemetry#tracing

Infrastructure

Oct 5, 2026 · 5 min readCopyEscape (CVE-2026-17106): patch docker cp, and stop copying out of running containersA race in docker cp lets a malicious container write files anywhere the copying process can write on the host. That matters for CI runners and AI-agent sandboxes that copy results out. Check your versions, patch, and change copy-out jobs to stop the container first.#docker#security#cve#ci

All posts

// what I write about — and build

Three topics. Also three things I build for clients.

Every topic has posts to read and a free quote if you want it built for your data and systems.

RAG & semantic search

Search and assistants that answer from your own documents — with sources, and a handoff when they’re not sure.

Embeddings & vector search
Hybrid keyword + meaning search
Assistants with citations

AI integrations

LLMs wired into the systems you already run — tickets, CRM, catalog, inbox — with costs and quality you can see.

Summaries, drafts, classification
Translations and content generation
APIs, webhooks, your own model

Agent pipelines

Multi-step agents as inspectable workflows — they plan, act and check, and a person approves anything that matters.

Workflows you can open and trace
Human approval steps
Event-driven, retry-safe backends

New posts by RSSOne entry per post, no tracking — works with any feed reader.Subscribe to the feed

// about

One engineer. I write about what I build.

Software engineer working on RAG, AI integrations and agent pipelines on Go and Python backends. Author of the Redelay framework and the FlowDSL workflow engine. Remote, EU time zones.

GoPythonRAGembeddingsLLM APIsagentsKafka / NATSMongoDB

RSS feed

// free quote

Read something you need? I’ll quote it for free.

RAG, AI integrations, agents or the backend underneath — tell me what you have and what should change. I read every request myself.

Free · no commitment

Tell me what you have. I’ll tell you what it takes.

1Describe the projectA few sentences is enough — about two minutes.

2I review itI read it myself and may ask a follow-up question.

3You get a free quoteScope, approach and estimate — yours to keep, no strings.