Blog: what we learn building
Notes from practice: architecture, Go, AI-assisted engineering and infrastructure – written by the people who build the systems.
Artificial Intelligence
A revDSG-compliant AI architecture: what actually counts
The fine of up to CHF 250,000 lands on the person who acted, not the company. What that means for an AI system's architecture, provision by provision.
Read the article
All articles
Cloud & Infrastructure
Kubernetes v1.37: upgrading without downtime
Static pods break, old cAdvisor flags stop the kubelet, SELinuxMount is now on. What actually goes wrong upgrading to Kubernetes v1.37.
Cloud & Infrastructure
What Kubernetes really costs in Switzerland
A provider comparison in CHF, a fully worked cost model, and the item everyone underestimates: operations cost more than the infrastructure.
Artificial Intelligence
Sovereign AI inference in Switzerland: the architecture
A provider comparison in CHF, GPU scheduling with DRA, and the points where sovereignty actually breaks. Usually it is not the model.
AI-Assisted Engineering
The agents nobody approved
OpenClaw runs locally, without procurement, with far-reaching rights. Agent governance means: an allowlist, permission classes, detection.
Architecture
Running MCP servers in Go in production
What the July 2026 MCP specification changes: a stateless core, OAuth instead of a shared token, and the tool design mistakes we see most often.
AI-Assisted Engineering
Guardrails for coding agents: never its own reviewer
Scale review depth by task type rather than by agent confidence. What belongs in the CI pipeline and what a human has to read.
AI-Assisted Engineering
Using coding agents in line with data protection law: the gap in the subscription
A personal Pro subscription used on company code falls under consumer terms. Which plans and hosting routes make coding agents compliant.
AI-Assisted Engineering
AI productivity: METR's 19 per cent is out of date
METR's follow-up study flips the sign. What the research actually shows in August 2026, and why both camps quote it wrong.
Security & Compliance
Implementing the CRA reporting obligation from 11.9.2026
Twenty-four hours to the first report. What you need in place in SBOM, monitoring and reporting chain before the Cyber Resilience Act applies.
Architecture
Why we build critical backends in Go
Not because of the benchmarks. Because of what a team can still understand after three years.
AI-Assisted Engineering
AI writes the code. Who writes the architecture?
How we use AI-assisted engineering so that less code exists at the end, not more.
Cloud & Infrastructure
Kubernetes is not a goal
When a cluster earns its keep, when a single VM is the better architecture, and how to tell the difference.
Architecture
Decisions you can still understand in two years
Architecture Decision Records are the cheapest tool against systems nobody can explain any more.
Backend
Idempotency: the least conspicuous feature of a payments API
Networks are unreliable and clients retry. Why an idempotency key is not a detail but the foundation.
Cloud & Infrastructure
Three dashboards instead of thirty
Observability rarely fails because of the tooling. It fails because nobody looks at it any more.