Skip to content
~/sph.sh

python

6 posts

HMAC: What It Is, How It Works, and When It Is the Wrong Tool

A grounded explainer for backend engineers: HMAC-SHA-256 for webhooks, signed URLs, and internal auth, with three-language code and the boundary where digital signatures take over.

securitycryptographyhmac+5
Skip the MCP Layer: Scoped API Access for Production AI Agents

Why production teams replace broad MCP access with scoped API proxies. Covers Atlassian (Jira/Confluence), Google Workspace, and Notion with FastAPI proxy, CLI wrapper, and n8n examples.

mcpapi-designpython+5
Prompt Engineering for Production Systems: A Systematic Engineering Approach

A comprehensive technical guide to building production-grade prompt engineering systems, covering systematic design, security, observability, and cost optimization for enterprise LLM applications.

prompt-engineeringllmai-development+6
AI Agent Security: Guardrails and Defense Patterns for Production Systems

A comprehensive guide to securing AI agents in production with AWS Bedrock Guardrails, defense-in-depth strategies, and practical implementation patterns for preventing prompt injection, tool misuse, and multi-agent attacks.

ai-agentsaws-bedrocksecurity+5
LangChain in Production: Patterns That Work and Anti-Patterns That Don't

Real lessons from deploying LangChain applications to production. Learn about the anti-patterns that cause failures and the patterns that enable success, with working code examples and cost optimization strategies.

langchainllmproduction+5
OpenTelemetry Fundamentals: A Beginner's Guide to Modern Observability

A comprehensive beginner's guide to OpenTelemetry covering traces, metrics, and logs with practical implementation examples, common pitfalls, and a detailed terminology glossary.

opentelemetryobservabilitydistributed-tracing+5