
AWS Lambda Is Dead. The $0.20 Was Never the Price
Last quarter we migrated 47 Lambda functions off AWS. The monthly bill dropped from $8,362 to $1,790....
Every essay and deep dive I have published, aggregated here and from Dev.to.

Last quarter we migrated 47 Lambda functions off AWS. The monthly bill dropped from $8,362 to $1,790....

A 91 second experiment, an $11.78 charge, and a moment of hesitation that surprised me more than the...

A revenue chart that goes vertical does not tell you who pays. It tells you who gets charged. A...

A 300 megawatt deal, a $180 a month decision, and the strange feeling of having a vendor solve your...

I track my own AI spend across three projects. In March, the line item that grew fastest was not...

On April 30, Cloudflare quietly published a blog post and a docs page that nobody outside the agentic...

Giving an AI agent permission to spawn sub-agents (without losing control) A reader asked...

Three free SVG brand icon libraries compared on icon count, color support, license, and integration. Pick the right one for your project.

Most TypeScript auth libraries assume Node.js. They reach for crypto.randomBytes, Buffer, the Node fs...

If you're building an MCP server, sooner or later someone is going to ask: how does authentication...

I noticed a pattern looking at three months of Anthropic invoices. The same 8 KB system prompt was...

A Vercel employee clicked Allow All on an AI app's OAuth consent screen. Three weeks later, customer environment variables were on a hacker's drive with a $2 million asking price. Here is the four-layer audit your org probably has not run.

Microsoft announced Copilot Pro is still $10 per month, but $10 now buys $10 in AI credits, and a single Opus agent session can consume that. Here is what your real bill looks like.

Kevin Lynagh published a short essay this week about how he sabotages his own projects by...

For about four weeks in March and April, Claude Code felt noticeably worse. I was not imagining it....

A four-layer teardown of what you are actually buying when you follow an AI tutorial in 2026, with real numbers and a checklist you can run before you commit hardware or a subscription.
For years I dismissed local-first as a correctness-obsessed ideology. In the last twelve months three of my products adopted it, and the reasons were not what the manifestos said they would be.
I had a $9 Starter tier on one of my tools for eighteen months. Deleting it was the best pricing decision I made last year. Here is the math, the customer impact, and the lesson I am now applying to every other product.

A real Auth0 migration to kavachOS, with the bill, the diff, the things that broke in prod, and the call I would make again.

Password reset is where most apps leak. Here is a working Next.js 15 implementation, the 3 security mistakes I keep finding in code reviews, and a 12 line version using kavachOS.

A working login flow in Next.js 15. The form, the session cookie, CSRF, remember me, and a look at the constant-time comparison that keeps attackers from enumerating accounts.

A working register user flow in Next.js 15. Frontend form with real validation, a server endpoint that does the right things, the database schema, and the email verification handoff.

Day 2 of the auth from scratch series. The full Postgres schema for users, sessions, OAuth, reset tokens, magic links, verification, passkeys, and agent tokens. Every column, every index, every decision.

A 12 part series on building real authentication from scratch in Next.js and Postgres. Start here for the architecture, the tables you will need, and a diagram of the whole system