Field Notes
Notes from the work
Specific problems from real engagements — deployment mechanics, migration traps, and the parts of AI and data work that only show up once something is in production. No maturity curves.
cXML Punchout: What the Spec Doesn't Tell You
Punchout looks like three documents and a redirect. Then you meet the edit operation, discover the cart isn't an order, and find out your buyer's procurement team can't give you test access for six weeks. A field guide.
Read itPayment Integration: The Redirect Is Not the Truth
Most payment bugs come from one assumption — that the customer returning to your success page means the money moved. Webhooks, idempotency, reconciliation, and the failure modes that only appear in production.
Read itApplication Security When Your App Can Be Talked Into Things
Classic appsec assumes untrusted input gets validated before it reaches anything that can act. Put a language model in the middle and that assumption quietly stops holding. What changes, what doesn't, and the trade-offs nobody puts in the pitch deck.
Read itBuild Once, Configure at Runtime: Fixing the Angular Deployment Mistake Almost Everyone Makes
If your pipeline runs ng build once per environment, the artifact you tested is not the artifact you shipped. Here's why that happens, what it costs, and how to fix it without rewriting your app.
Read itRAG in C#: What Actually Separates a Demo from Something You Can Ship
Retrieval is the hard part, and almost nobody's first attempt survives a real question. A practical walkthrough of hybrid search, reranking, refusal and security trimming with Azure OpenAI and Azure AI Search from .NET.
Read itRecognise one of these problems?
The mapping session is free and yields something useful even if we never work together.
Book a Free Consultation