How OpenTelemetry actually works in 2026. The collector, traces / metrics / logs / context propagation, instrumenting Python, Go, and Rust services, sampling that doesn’t kill recall, and the production-grade end-to-end setup.
A grounded look at WebAssembly on Kubernetes in 2026. WASI 0.2’s component model, Spin and wasmCloud, runwasi shims, the workloads where WASM is genuinely better than containers, and the ones where it isn’t.
How modern supply chain security actually works — SBOMs, SLSA levels, signing with Sigstore/cosign, attestations, and a practical CI pipeline that protects against typosquatting, dependency hijacks, and tampered builds.
A short, practical guide to SLOs and error budgets for application developers. Choose the right SLI, pick targets you can actually defend, calculate the budget, and use it to drive feature-velocity vs. reliability tradeoffs.
GitOps mechanics, Argo CD vs Flux, app-of-apps, ApplicationSets, secret management, multi-cluster patterns, drift detection, and the production gotchas — explained without the cargo cult.
What platform engineering is in 2026, what makes a good Internal Developer Platform, the building blocks (Backstage, golden paths, paved roads, Crossplane), and a pragmatic path to introducing one without a 12-person platform team.
A pragmatic Linux server hardening checklist — SSH keys, non-root users, UFW firewall, fail2ban, unattended-upgrades, and the small habits that block most opportunistic attacks.
How to make a backend observable: structured logs, RED/USE metrics, distributed traces, and the tooling (Prometheus, Loki, OpenTelemetry, Grafana) that ties it together.
Build a real CI/CD pipeline for Python apps on GitHub Actions: lint, type-check, test with services, multi-version matrix, Docker build/push, and a deploy step that won’t break.
Everything an app developer should know about load balancers — L4 vs L7, distribution algorithms, health checks, sticky sessions, and which tools to reach for in 2026.