Published May 24, 2026

Keycloak vs Entra ID: the real tradeoffs nobody puts in a comparison table

Two decades of IAM experience condensed into a candid comparison: licensing maths, protocol flexibility, Conditional Access, migration pain, and why most enterprises end up running both.

Published May 27, 2026

Hermes Agent vs OpenClaw: why I switched and what the benchmarks miss

A hands-on comparison of the two leading open-source AI agents: persistent memory vs plugin ecosystem, seven-layer security vs plugin CVEs, skills vs 5,700 plugins, and why Hermes wins for long-term workflows.

Published May 21, 2026

Is SailPoint worth it? An honest assessment of cost, complexity, and alternatives

A candid look at SailPoint’s real value: certification excellence vs implementation pain, BeanShell debt, upgrade nightmares, and when you should pick something else.

Published May 18, 2026

SailPoint BeanShell and custom connectors: the production developer’s purgatory

The real-world pain of BeanShell rules and custom connectors in SailPoint IdentityIQ: null traps, silent failures, BuildMap errors, and what changes when you move to ISC.

Published May 15, 2026

SailPoint IIQ to ISC: what nobody tells you about the migration

The hard truths about migrating from SailPoint IdentityIQ to Identity Security Cloud: what breaks, what gets lost, and why your custom Java rules are now a liability.

May 10, 2026

Keycloak high availability: patterns that survive a production outage

Production patterns for running Keycloak in HA mode: database replication, Infinispan rebalancing, load balancer config, and what happens when a node disappears.

May 13, 2026

Keycloak fail recovery: what breaks and how to fix it

A practical guide to Keycloak recovery scenarios: split-brain in Infinispan, corrupted database sequences, stuck migration, dangling sessions, and broken trust stores.

April 30, 2026

Boring cloud architectures that survive growth

Three principles I keep coming back to when teams ask me what their cloud should look like once it stops being a prototype.

• Cloud
• Architecture
• Postgres
• Reliability

April 25, 2026

IAM that scales: human roles, machine roles, blast radius

A practical mental model for designing IAM that survives growth without turning into the team that rubber-stamps wildcards.

• IAM
• Security
• Cloud
• Architecture

April 22, 2026

Calm AI platforms: shipping intelligence without burning out the room

Three patterns I lean on to bring modern AI into enterprise platforms without turning the team into permanent firefighters.

• AI
• Platform
• Architecture
• Claude

April 18, 2026

Local AI on a Mac: what fits in 16 GB without lying to yourself

A practical map of which local AI workflows are real and which only look real, on a Mac with 16 GB of unified memory.

• AI
• Local AI
• macOS
• Ollama
• MLX

April 12, 2026

Systemd timers vs cron: when to choose what

A pragmatic decision guide for picking between systemd timers and cron, written from the trenches of running both for years.

• Linux
• systemd
• cron
• Operations

April 5, 2026

macOS dev environment without the Homebrew bloat

How I keep a fast, repeatable Mac dev setup without ending up with 600 packages I cannot account for.

• macOS
• Homebrew
• mise
• Developer Experience

March 28, 2026

Kubernetes for the resistant: when not to use it

I have run Kubernetes in production for years. Here are the four signals that tell me a team should not be running it yet.

• Kubernetes
• Architecture
• Platform
• Pragmatism