// Writing
Notes from the build.
Guides and positions from engineers who ship. No listicles and no ghostwriters.
Tool Calling Is the Primitive. MCP Is the Layer Above It.
Models could call tools before MCP existed. The raw API loop is four steps and the model never executes anything. Here is what MCP adds on top, and when you do not need it.
Euael Eshete · Aug 14, 2026
// GuideHow Far Did It Reach? Blast-Radius Audits and Credential Rotation
A compromised dev machine matters to the extent it had access to other things. Part 3: auditing SSH keys, servers, cloud, and CI/CD, and rotating credentials without locking yourself out.
Euael Eshete · Aug 10, 2026
// GuideDid the Payload Actually Run? Host Forensics After a Bad Dependency
Finding a malicious package tells you what could have happened. Part 2: the process, persistence, connection, and file-timeline checks that tell you whether it did, and how to fix the dependency for real.
Euael Eshete · Aug 10, 2026
// GuideHow to Find a Compromised Dependency in Your Node Project
A resolution override can redirect any package name across your whole dependency tree, and it reads like routine pinning noise. Part 1: how to find the one package that does not belong.
Euael Eshete · Aug 10, 2026
// GuideMCP Just Went Stateless: What the July 2026 Spec Update Actually Changes
The Model Context Protocol dropped its biggest spec revision yet. No more session handshake, a new request pattern for mid-call input, and authorization that finally closes a real hole. Here is what changed and why it matters.
Euael Eshete · Jul 29, 2026
// GuideSizing a Connection Pool With Math, Not Guesses
Most connection pool sizes are picked by copying a number from a blog post. Here's the actual math: Little's Law, the classic PostgreSQL formula, and what happens as utilization climbs toward 1.
Euael Eshete · Jul 17, 2026
// GuideWhat "MCP-Native" Actually Means (Most "AI-Ready" Tools Aren't)
AI-ready has become a label you slap on a product. MCP-native is a specific, checkable architectural claim. Here's the difference, and why it matters for what you build next.
Euael Eshete · Jul 17, 2026
// GuideWhy we don't start with a sales call
A free audit call sounds helpful. For a small business owner, it's an hour they don't have. Here's what we do instead.
Euael Eshete · Jul 17, 2026
// GuideHow to scope a software project before you talk to any agency
Five questions that turn a vague brief into something an engineering team can estimate.
Euael Eshete · Jul 17, 2026