JOURNAL / PRODUCT ENGINEERING

Engineering decisions.
Explained in practice.

Practical guides to reliable systems, from tenant isolation and integrations to AI retrieval and product operations.

Page 1 of 11 · Articles 1–12 of 125

KNOWLEDGE PATHS

Start with the challenge you need to solve.

All topic hubs →
Conference screen asking whether manipulated digital content is real or fake
Saudi technology · AI safety · Deepfakes01

Saudi deepfake campaign: build verification into products

A source-backed analysis of Saudi Arabia’s deepfake campaign and an auditable media-verification design for product and commerce teams.

9 min readRead article
Engineers reviewing code together during a technical training session
DevOps · GitLab Security02

GitLab CVE-2026-110264: patch the critical RCE safely

A practical, evidence-led upgrade and investigation guide for GitLab’s unauthenticated CVSS 10.0 RCE patch.

9 min readRead article
Open archive boxes filled with paper documents on metal library shelves, representing evidence selection for RAG context construction
AI & RAG03

RAG context construction: pack evidence, not chunks

A production guide to turning retrieved candidates into a governed, token-budgeted, citation-ready evidence packet.

12 min readRead article
Handheld barcode scanner photographed on a white surface, representing verified operational routing and order handling.
Saudi commerce · Salla · Order operations04

Salla order auto-assignment: reliable employee routing

A production architecture for managing Salla employee-assignment rules as desired state, proving outcomes on orders and preventing silent routing drift.

9 min readRead article
Back of a computer server with Ethernet cables, USB devices and serial-to-Ethernet adapters, illustrating networked runtime dependencies.
DevOps · curl · Cybersecurity05

curl 8.23.0: patch the HTTP/2 upload use-after-free

A source-backed response guide to curl 8.23.0 and the High-severity HTTP/2 upload use-after-free, from exposure analysis to fleet verification.

9 min readRead article
A bright modern office workstation with a widescreen monitor, desk lamp and plants, representing controlled computer-use workflows.
OpenAI · Computer use · AI agents06

GPT-6.1 Terra computer use: build a guarded action loop

A source-backed production guide to GPT-6.1 Terra for visual and computer-use workflows, from routing and isolation to approvals, verification and rollback.

9 min readRead article
Tall warehouse shelving filled with organized packages, illustrating order resources that must be hydrated selectively for fulfilment and ERP workflows.
Saudi commerce · Salla · Order integration07

Salla light orders: hydrate data without N+1 storms

A production architecture for replacing Salla's retired expanded order response with bounded, observable and recoverable resource hydration.

9 min readRead article
Blue-lit server racks in a data center, representing the web infrastructure fleet that must be patched and verified after the NGINX security release.
DevOps · NGINX security · Web infrastructure08

NGINX October 2026 security update: patch all five paths

A production guide to upgrading NGINX 1.30.6/1.31.7+, auditing feature exposure, canarying HTTP/3 and TLS behavior, and proving every serving instance is fixed.

9 min readRead article
A sheet-fed scanner used to digitize loose documents, illustrating the controlled ingestion boundary before a document enters a RAG index.
AI · RAG security · Document ingestion09

Secure RAG ingestion: quarantine documents before indexing

A production architecture for quarantining untrusted documents, preserving provenance and preventing retrieved content from becoming privileged instructions.

9 min readRead article
A forklift loads palletized cargo into a shipping container at a warehouse, illustrating the physical carrier handoff behind a shipment pickup timestamp.
Saudi commerce · Salla · Shipping operations10

Salla shipment pickup time: make the handoff auditable

A practical guide to turning Salla's actual pickup timestamp into auditable carrier handoff evidence instead of another fragile status update.

8 min readRead article
Bright data center with server cabinets and overhead network cables, illustrating Apache Tomcat production infrastructure.
Apache Tomcat · Cybersecurity · DevOps11

Apache Tomcat October 2026 security update: patch and verify

A source-backed production guide to the October 2026 Apache Tomcat security batch, fixed versions, exposure conditions, safe rollout and fleet verification.

9 min readRead article
Two blue server racks with dense cabling, illustrating a controlled API platform migration.
Anthropic · Claude API · Platform Engineering12

Anthropic API 2026-10-21: migrate contracts without outages

A production migration plan for Anthropic API 2026-10-21, major SDK changes, contract tests, canaries, observability and rollback.

8 min readRead article