May 2026 · 12 min
One auth model for every SAP product
Why xsuaa, IAS, and Cloud Identity belong behind one CLI verb — and how we kept the keychain quiet.
April 2026 · 9 minEmitting an MCP server from a Cobra tree
A walk-through of the code generator that turns sub-commands into a standards-compliant MCP transport.
April 2026 · 7 minHash-chained audit logs that survive an air-gap
How we made an audit chain that you can verify after a cold restore on a network you cannot reach.
March 2026 · 14 minSLSA L3 on a budget
Reproducible builds, hermetic environments, and the cheapest path to credible provenance.
March 2026 · 6 minSAP API Policy v4/2026 in plain English
What the policy actually says about agents and what it means for your architecture.
Feb 2026 · 11 minWhy we built a local SQLite mirror
FTS5, vector search, and a deliberate choice to keep agents off the OData hot path.
Subscribe via RSS.