Publications
This page contains my scholarly articles and technical publications.
Technical Articles
Context Graphs: My Thoughts on the Trillion Dollar Evolution of Agentic Infrastructure
After reading Jaya Gupta's post about Context Graphs, I have not been able to stop thinking about it. For me, it did something personal: it gave a name to the architectural pattern I have been circling around in the agentic infrastructure discussions on this blog for the past year. Gupta's thesis is simple but profound—the last generation of enterprise software created trillion dollar companies by becoming systems of record. The question now is whether a new layer will emerge on top of them: a system of record for decisions.
2025: The Year Agentic AI Got Real (What Comes Next)
If 2024 was the year of AI experimentation, 2025 was the year of industrialization. The speculative boom around generative AI has rapidly matured into the fastest-scaling software category in history, with autonomous agents moving from the lab to the core of enterprise operations.
Agent Skills: The Missing Piece of the Enterprise AI Puzzle
The enterprise AI landscape is at a critical juncture. We have powerful general-purpose models and a growing ecosystem of tools. But we are missing a crucial piece: a standardized, portable way to equip agents with the procedural knowledge and organizational context they need to perform real work.
From Boom to Build-Out: The State of Enterprise AI in 2026
The era of AI experimentation is over. What began as a speculative boom has rapidly industrialized into the fastest-scaling software category in history. Enterprise spending on generative AI skyrocketed to $37 billion in 2025, a stunning 3.2x increase from the previous year.
The Three-Platform Problem in Enterprise AI
Enterprise AI has a platform problem. The tools to build AI-powered applications exist, but they're scattered across three disconnected ecosystems—each solving part of the puzzle, none providing a complete solution. This isn't a 'too many choices' problem. It's an architectural one.
The Platform Convergence: Why the Future of AI SaaS is Headless-First
The AI agent market is fragmenting into two incomplete categories: Agent Builders that democratize creation but lack governance, and AI Gateways that provide control but slow innovation. Drawing lessons from Stripe and Twilio, the future belongs to unified, headless-first platforms that combine intuitive interfaces with programmable infrastructure.
MCP Enterprise Readiness: How the 2025-11-25 Spec Closes the Production Gap
The Model Context Protocol's first anniversary release isn't just a milestone—it's a strategic inflection point. With asynchronous Tasks, enterprise-grade OAuth, and a formal extensions framework, the 2025-11-25 spec directly addresses the operational barriers that have kept organizations from deploying agent-tool ecosystems at scale. This post examines how these new primitives transform MCP from a development convenience into production-grade infrastructure.
The Governance Stack: Operationalizing AI Agent Governance at Enterprise Scale
With 88% of organizations now deploying AI agents in production, governance has shifted from a theoretical concern to an operational imperative. Yet 40% of technology executives admit their governance programs are insufficient. This article presents the technical infrastructure—the 'governance stack'—required to transform governance frameworks from policy documents into automated, enforceable reality across the entire agentic workforce lifecycle.
Why Private Registries are the Future of Enterprise Agentic Infrastructure
With 79% of companies already adopting AI agents, a critical governance gap has emerged. Without robust management frameworks, organizations risk a chaotic landscape of shadow AI, creating significant security vulnerabilities and operational inefficiencies. The solution lies in Private Agent and MCP Registries—command centers for agentic infrastructure that provide the visibility, governance, and security necessary to scale AI responsibly.
From Espionage to Identity: Securing the Future of Agentic AI
Anthropic has detailed its disruption of the first publicly reported cyber espionage campaign orchestrated by a sophisticated AI agent. The incident, attributed to state-sponsored group GTG-1002, signals that the age of autonomous, agentic AI threats is here. This post dissects the anatomy of the attack and explores how emerging standards like OpenID Connect for Agents (OIDC-A) provide a necessary path forward.
Claude Skills vs. MCP: A Tale of Two AI Customization Philosophies
Anthropic has introduced two powerful but distinct approaches to AI customization: Claude Skills and the Model Context Protocol (MCP). While both aim to make AI more useful and integrated into our workflows, they operate on fundamentally different principles. This post explores their differences, synergies, and the exciting future they represent.
Beyond "Non-Deterministic": Deconstructing the Illusion of Randomness in LLMs
Attributing an LLM's behavior to 'non-determinism' is like blaming a complex system's emergent behavior on magic. It's an admission of incomprehension, not an explanation. The truth is far more fascinating and, for architects and engineers, far more critical to understand.
The Architectural Revolution: Why AI Agents Shatter Traditional Design Patterns
For decades, software architects have operated under a fundamental assumption: we design systems, and systems execute our designs. AI agents are rewriting this contract entirely. Unlike the monoliths and microservices that came before them, AI agents don't just execute architecture—they evolve it.
Do Agents Need Their Own Identity?
As AI agents become more sophisticated and autonomous, a fundamental question is emerging: should agents operate under user credentials, or do they need their own distinct identities? This isn't just a technical curiosity—it's a critical trust and security decision that will shape how we build reliable, accountable AI systems.
Securing AI Assistants: Why Your Favorite Apps Need Digital IDs for Their AI
As AI assistants on platforms like Instagram, Facebook, and Booking.com become more autonomous, they need proper digital identities to securely act on our behalf. Learn how AI identity systems work and why they matter for consumer platforms.
From Gateway to Guardian: The Evolution of MCP Security
While AWS's MCP Gateway solves operational challenges, production AI systems demand evolution from basic centralization to identity-aware security guardians that address the "lethal trifecta" of vulnerabilities in enterprise deployments.
Securing MCP with OIDC & OIDC-A: Identity-Aware API Gateways Beyond "Glorified API Calls"
Integrating OpenID Connect (OIDC) and the new OIDC-A agent extension with an identity-aware API gateway to securely authenticate users, LLM agents, and MCP tools—going far beyond basic API proxying.
OpenID Connect for Agents (OIDC-A) 1.0 Proposal
Technical proposal for extending OpenID Connect Core 1.0 to provide a framework for representing, authenticating, and authorizing LLM-based agents within the OAuth 2.0 ecosystem.
AI Agents and Agentic Security: The Next Frontier in Enterprise Automation
Exploring the potential of AI agents in enterprise security and automation, and how they can enhance security operations.
A feat of strength MVP for AI Apps
Exploring the concept of a Minimum Viable Product (MVP) in AI applications, focusing on delivering value by understanding and addressing user needs effectively.
The Nockout Story
Discover how Nockout is transforming the way we find and enjoy sports activities. No more hassle in booking courts, no more mismatches in skill levels, just pure joy of playing your favorite sports.
Hybrid Search for E-Commerce with Pinecone and LLMs
Learn how to build a powerful hybrid search system for e-commerce applications by combining traditional information retrieval methods with machine learning models like Language Models (LLMs) and Pinecone, a managed vector database. Discover the benefits of hybrid search for e-commerce, including improved search relevance, personalization, handling long-tail queries, and simpler infrastructure management.
Demystifying the Shell Scripting: Working with Files and Directories
Master the art of working with files and directories in shell scripting to streamline your tasks and improve efficiency. Learn how to create, copy, move, and delete files and directories, as well as read and write to files using practical examples. Discover the power of searching for files and directories with the `find` command. Enhance your shell scripting skills with valuable resources and tutorials, and unlock the full potential of file and directory management in the shell.
Demystifying the Shell: A Beginner's Guide
Discover the power of the shell, a command-line interface that allows you to interact with your computer's operating system more directly and efficiently. Learn the basics of using the shell, navigating within it, and connecting programs using simple examples. Enhance your skills with miscellaneous tips and resources, including tab completion, command history, keyboard shortcuts, and helpful online tools. Embrace the command line and unlock the full potential of the shell!
Demystifying the Shell Scripting: A Beginner's Guide
Shell scripting is a powerful tool that enables users to automate tasks, perform complex operations, and create custom commands. In this beginner's guide, we will explore the basics of shell scripting, including creating and executing scripts, working with variables, control structures, loops, and functions. By understanding these fundamental concepts, you will be well on your way to mastering shell scripting and unlocking its full potential.
Demystifying the Shell Scripting: Advanced Techniques and Best Practices
Building upon the fundamentals of shell scripting, this guide delves into advanced techniques and best practices that will elevate your scripting skills. We will explore error handling, command substitution, process management, and share valuable tips for writing efficient, robust, and maintainable scripts. By mastering these advanced concepts, you will be well-equipped to tackle complex scripting challenges and harness the full power of shell scripting.
Version Control (Git)
How to use version control _properly_, and take advantage of it to save you from disaster, collaborate with others, and quickly find and isolate problematic changes. No more `rm -rf; git clone`. No more merge conflicts (well, fewer of them at least). No more huge blocks of commented-out code. No more fretting over how to find what broke your code. No more "oh no, did we delete the working code?!".