Featured Article
On-Call Without Burnout: Rotations, Runbooks, and Escalation
Our best engineer quit citing on-call. We rebuilt the whole thing: saner rotations, runbooks that actually help at 3am, and escalation that doesn't punish asking for help.
KU
Kiril UrbonasDevOps Engineer
Topics
Latest Articles
View All →
••6 days ago
Guardrails for Production LLMs: Input and Output Filtering That Holds
A user got our support bot to recite its system prompt and then draft a refund it wasn't authorized to give. Two layers of guardrails, one on input, one on output, closed both holes.
KU
Kiril Urbonas·5 min read·1
••last week
Zero-Trust Service-to-Service Auth with SPIFFE and SPIRE
Static service tokens leaked into logs and never rotated. SPIFFE identities plus SPIRE-issued SVIDs gave us short-lived certs and killed the shared-secret sprawl.
KU
Kiril Urbonas·4 min read·1
