Code Matters

All that really matters is that it runs… right?

OAuth 2.1 MCP server security vault door locking mechanism

Securing an MCP Server with OAuth 2.1 and Keycloak: How Engram Moved from Bearer Tokens to a Real Resource Server

Posted on June 16, 2026 by JB

Most MCP servers ship with a static bearer token. It’s one line in .mcp.json, it works on day one, and it’s the wrong answer the moment your server is anything other than a personal dev tool. Engram, the semantic memory layer behind my AI-native development workflow, started there too. A shared bearer header in .mcp.json, […]

Read More: Securing an MCP Server with OAuth 2.1 and Keycloak: How Engram Moved from Bearer Tokens to a Real Resource Server
Posted in Code
Continuum — persistent memory for AI-native engineering

Introducing Continuum: The Memory Behind the Six Weeks Is Now a Product

Posted on June 14, 2026 by JB

When I wrote about replacing HighRadius in six weeks, I said the pace wasn’t raw AI speed — it was contextual continuity. Every agent session opened already knowing the architecture, the prior decisions, the history. Nothing was re-explained. Nothing was lost. That continuity layer now has a name and a front door. It’s called Continuum, […]

Read More: Introducing Continuum: The Memory Behind the Six Weeks Is Now a Product
Posted in Code
Night cityscape with blue-lit skyscrapers and light trails representing AI-Native development replacing a HighRadius cash application platform in six weeks

Six Weeks to Replace HighRadius: What Disciplined AI-Native Development Actually Looks Like

Posted on June 5, 2026 by JB

Most people treat “AI-Native development” as a productivity story. Write faster, debug faster, ship faster. That’s the small version. The larger version is this: with the right architecture and process discipline, a single developer can design, build, document, and validate an enterprise-grade platform in a timeframe that would be implausible otherwise. Not a prototype. Not […]

Read More: Six Weeks to Replace HighRadius: What Disciplined AI-Native Development Actually Looks Like
Posted in Code
Glowing blue and orange data streams flowing through a dark cityscape representing CSP nonce injection through Express SSR, NGINX reverse proxy, and browser enforcement layers

CSP Nonce Injection Through the Entire Stack: Express SSR → NGINX → Browser

Posted on March 18, 2026 by JB

Most developers know Content-Security-Policy exists. Fewer have actually shipped an enforcing policy. And almost nobody talks about the part that makes nonce-based CSP genuinely hard: making it work correctly across an SSR caching layer, a reverse proxy, and a browser that will block your entire page if a single <style> tag is missing its nonce. […]

Read More: CSP Nonce Injection Through the Entire Stack: Express SSR → NGINX → Browser
Posted in Code
Digital speedometer gauge with blue glow and binary code representing BenchmarkDotNet performance measurement in .NET

BenchmarkDotNet in Practice: Measuring What Actually Matters

Posted on February 27, 2026 by JB

Most .NET developers have heard of BenchmarkDotNet. Fewer have used it on something that matters. And almost nobody talks about the part that actually changes how you think about performance: designing benchmarks that answer the right question. I spent several weeks optimizing a poker hand evaluator — a pure C# reimplementation of Cactus Kev’s classic […]

Read More: BenchmarkDotNet in Practice: Measuring What Actually Matters
Posted in Code