Architecture blueprints, technical deep dives, and public demos I’ve written and published on this site.
Role and scope
These are published blueprints, architecture notes, and demos. They describe designs, patterns, and implementations I’ve written about or demonstrated. They are not client case studies, and no client names or outcomes are implied. To talk about a project, start a conversation.
Architecture blueprints & notes
Architecture blueprint
ARC GitHub Runners as a Platform Service
A blueprint for running GitHub Actions self-hosted runners as a centralized platform service on Amazon EKS — ephemeral pods, IRSA two-hop trust, multi-tenant namespaces, and zero long-lived credentials.
- GitHub Actions
- ARC
- Kubernetes
- EKS
- IRSA
Architecture notes
Anyscale on Azure
Notes on Anyscale landing natively on Azure Kubernetes Service: Managed Ray, distributed workloads, and agentic AI on AKS.
- Ray
- AKS
- Azure
- AI workloads
Architecture deep dives
Kubernetes networking
Layer 7 Traffic on AKS with Application Gateway for Containers
How Application Gateway for Containers handles routing, TLS, and canary releases on AKS through Kubernetes-native APIs.
- AKS
- Gateway API
- AGC
Governance architecture
Your Policy Checks Are Green. Your Impact Is Still Unknown.
Consumer impact review for shared Terraform/Bicep modules and Helm charts, with an interactive architecture workbench.
- Terraform
- Bicep
- GitHub Copilot
- MCP
Agent execution
Your Agent Needs a Boundary: Azure Container Apps Sandboxes
Why agents need an enforced execution boundary, what Azure Container Apps Sandboxes provides, and how it compares with NVIDIA OpenShell.
- Azure Container Apps
- Agentic AI
- Security
Cluster security
Kubernetes TLS Certificate Management
Certificate authorities, component certificates, communication paths, and the commands to inspect and manage cluster PKI.
- Kubernetes
- TLS
- PKI
Demos & talks
Public demo repository
session-beyond-failed-ci
The demo repository from my GitHub Dev Days 2026 session: GitHub Agentic Workflow definitions, Bicep fixtures, a shared module safety gate, and a local Policy MCP server.
- gh-aw
- Bicep
- MCP
Talk · slides
When CI Fails: Governed Investigation with GitHub Copilot and MCP
Session recap, 22-slide deck, event photos, and architecture from GitHub Dev Days 2026 at Microsoft Sri Lanka.
- GitHub Copilot
- GitHub Actions
- MCP
More writing lives on the Blog, and every session is listed under Talks.