Blog

Practical notes on AI agents, Laravel/Vue systems, DevOps, developer tools, and software decisions that need to survive maintenance.

backend-infrastructure · · 13 min

PHP 8.5.9 is a runtime patch contract, not an app deploy

PHP 8.5.9 fixes CVE-2026-17543 in pgsql and other security issues. A green Laravel deploy does not prove the hosts, CI images, workers, and base containers actually run the patched binary.

ai-agents · · 13 min

The Schema Change an AI Coding Agent Cannot Safely Guess

A generated migration that runs locally is not a production contract. Before an AI coding agent rewrites columns, require expand steps, dual-read boundaries, backfill evidence, worker compatibility, and an explicit rollback decision.

backend-infrastructure · · 12 min

The Rollback Path Is the Real AI Coding Feature

A clean AI-generated diff is not ready for production until a team can disable it, restore its data path, and prove the prior behavior returned. Build rollback evidence into the change before the model writes the patch.