Posts

Showing posts from 2025

Unlock Your Engineering Team's Potential: A Deep Dive into GitHub's Engineering System Success Playbook

In the fast-paced world of software development, engineering teams are the engine driving business innovation and success. But how do you ensure this engine is running at peak performance? GitHub's new Engineering System Success Playbook (ESSP) offers a comprehensive framework designed to help organizations measure and improve their engineering performance, leading to better business outcomes. This playbook isn't just about writing code faster; it’s a holistic guide that emphasizes the synergy between quality, velocity, and developer happiness. By adopting a systems thinking approach, the ESSP helps teams identify bottlenecks, implement meaningful changes, and foster a culture of continuous improvement. The Core Philosophy: Four Zones of Success Inspired by leading industry frameworks like SPACE, DORA, and DevEx, the playbook introduces a layered system of four "foundational zones" that underpin engineering excellence. Developer H...

Powering Up Your Engineering Team: Guidelines for Leveraging AI Effectively

The AI revolution isn't just knocking on the door; it's already sitting at the engineering workbench. From code generation and debugging to documentation and automated testing, Artificial Intelligence promises to be a powerful co-pilot for engineering teams. But like any powerful tool, it needs to be wielded wisely. Without clear guidelines, you risk inefficiencies, security vulnerabilities, and even a decline in core engineering skills. So, how do you harness AI's potential while mitigating its risks? It starts with establishing thoughtful guidelines and best practices. Why Bother with Guidelines? The Wild West Isn't Sustainable. "Let engineers experiment!" is a great sentiment, but when it comes to AI, unguided experimentation can lead to: Inconsistent Quality:  AI-generated code or solutions can vary wildly in accuracy and efficiency. Security Risks:  Feeding sensitive code or proprietary data into public AI models is a major no-go. IP Concerns:  Who owns A...

Building a Scalable Test Automation Framework for Large Applications: TypeScript, Playwright, Screenplay & Serenity BDD

Testing large applications can feel like navigating a labyrinth. As features grow, so does the complexity of ensuring quality. A well-architected test automation framework is not just a nice-to-have; it's a necessity for sustainable development and confident releases. In this post, we'll walk through building a powerful and maintainable test automation framework using a modern stack: TypeScript:  For strong typing and better code organization. Playwright:  For fast, reliable, and capable browser automation. Screenplay Pattern:  To create highly readable and maintainable tests by focusing on user interactions. Serenity BDD:  For living documentation, rich reporting, and clear insights into your test outcomes. CSV Data-Driven Testing:  To easily run the same tests with various data inputs. This combination provides a robust foundation for testing complex applications effectively. Why This Stack? Scalability & Maintainability:  The Screenplay pattern promo...

What is Vibe Coding?

Learn all about what "Vibe Coding" is using my curated  youtube playlist . Get ready to transform your coding experience from a task into a truly enjoyable and productive "vibe". Let's elevate your coding flow together! Beyond the theory, these further AI development examples  I have curated demonstrate practical implementations and real-world solutions. Eager to explore the tools that are empowering developers and shaping the future of code? Dive into this comprehensive AI Coding Assistants Landscape to discover the best options available, compare their features, and learn how they can boost your productivity. AI Coding Assistants Landscape

Architecting Application Authorisation

In the modern digital landscape, application authorisation has evolved from a simple gatekeeper to a complex, nuanced system crucial for security, user experience, and compliance. Gone are the days of basic "yes/no" access controls; today's applications demand granular permissions, delegated authority, and seamless integration across diverse platforms. Architecting application authorisation effectively requires a deep understanding of authentication flows, permission models like RBAC and ABAC, and technologies like OAuth 2.0 and OpenID Connect. This guide dives into the critical considerations and best practices for building robust, scalable, and user-friendly authorisation architectures, empowering you to secure your applications without compromising usability or innovation. OPA https://www.openpolicyagent.org/docs/latest/ https://sangkeon.github.io/opaguide/ https://github.com/StyraInc/awesome-opa https://docs.styra.com/apps/advanced-architecture Microservices https://w...

Books that I am reading in 2025

  My reading list at goodreads.com  is here. Additional lists, my recommended reading for: Architects Engineers