<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>César D. Velandia</title><description>Writing about software before we forget how it works</description><link>https://cesar.velandia.co/</link><item><title>Assume the Agent Read Your .env</title><link>https://cesar.velandia.co/assume-the-agent-read-your-env/</link><guid isPermaLink="true">https://cesar.velandia.co/assume-the-agent-read-your-env/</guid><description>Anything in your working directory or shell can end up in a coding agent&apos;s transcript, and transcripts get synced and shared. Make what the agent reads useless to anyone else.</description><pubDate>Sun, 13 Sep 2026 16:40:00 GMT</pubDate><category>security</category><category>AI</category></item><item><title>Write for the Agent That Will Read Your Repo</title><link>https://cesar.velandia.co/write-for-the-agent-that-will-read-your-repo/</link><guid isPermaLink="true">https://cesar.velandia.co/write-for-the-agent-that-will-read-your-repo/</guid><description>An AGENTS.md file has a reader that acts on what it says. That changes what belongs in it: commands that work, the traps, what never to touch, and very little else.</description><pubDate>Sun, 21 Jun 2026 14:05:00 GMT</pubDate><category>AI</category><category>tools</category></item><item><title>Keep the Hard Parts</title><link>https://cesar.velandia.co/keep-the-hard-parts/</link><guid isPermaLink="true">https://cesar.velandia.co/keep-the-hard-parts/</guid><description>AI makes you faster at what you already understand. The judgment you use to steer it and check its work comes from doing hard things yourself, so keep a few of them on purpose.</description><pubDate>Sat, 14 Mar 2026 15:20:00 GMT</pubDate><category>AI</category><category>engineering culture</category></item><item><title>Ship Software That Explains Its Own Failures</title><link>https://cesar.velandia.co/ship-software-that-explains-its-own-failures/</link><guid isPermaLink="true">https://cesar.velandia.co/ship-software-that-explains-its-own-failures/</guid><description>When software you ship breaks on a machine you don&apos;t run, it usually goes quiet, and quiet looks the same as switched off. The software has to keep its own record and report it later.</description><pubDate>Mon, 22 Dec 2025 02:34:56 GMT</pubDate><category>DevOps</category></item><item><title>AI Makes Tools Cheap to Build, Not to Own</title><link>https://cesar.velandia.co/ai-makes-tools-cheap-to-build-not-to-own/</link><guid isPermaLink="true">https://cesar.velandia.co/ai-makes-tools-cheap-to-build-not-to-own/</guid><description>AI made tools cheap to build. It didn&apos;t make them cheap to own, and owning is where the cost always was.</description><pubDate>Wed, 09 Jul 2025 01:54:00 GMT</pubDate><category>DevOps</category><category>AI</category><category>tools</category></item><item><title>Why I Switched to Jujutsu (jj) for AI-Generated Code</title><link>https://cesar.velandia.co/why-i-switched-to-jujutsu-jj-for-ai-generated-code/</link><guid isPermaLink="true">https://cesar.velandia.co/why-i-switched-to-jujutsu-jj-for-ai-generated-code/</guid><description>Writing code isn&apos;t the slow part anymore. Keeping the repo straight and cleaning up for review is, and that&apos;s why I switched to Jujutsu (jj).</description><pubDate>Wed, 02 Jul 2025 07:18:00 GMT</pubDate><category>AI</category><category>tools</category></item><item><title>AI Engineering Process Tools</title><link>https://cesar.velandia.co/notes/ai-engineering-process-tools/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/ai-engineering-process-tools/</guid><description>last update: 03/2025This catalog covers the essential known tools and platforms that AI engineers use to optimize workflows, accelerate development, and streamline ML operations. From fine-tuning optimization platforms like</description><pubDate>Mon, 05 May 2025 03:02:21 GMT</pubDate><category>notes</category><category>machine-learning</category><category>big-data</category></item><item><title>Leveraging Your Associative Thinking Style</title><link>https://cesar.velandia.co/notes/associative-thinking/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/associative-thinking/</guid><description>Associative thinking creates webs instead of ladders</description><pubDate>Mon, 21 Apr 2025 09:02:00 GMT</pubDate><category>personal-growth</category><category>notes</category></item><item><title>AWS Security Specialist - Prep</title><link>https://cesar.velandia.co/notes/aws-security-prep/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/aws-security-prep/</guid><description>Infrastructure SecurityYour team needs to provide access to a Linux instance shell using AWS Systems Manager Session Manager. The instance does not have Internet access. What is the minimum configuration</description><pubDate>Tue, 25 May 2021 07:54:02 GMT</pubDate><category>notes</category></item><item><title>Advice to an early-career DevOps engineer</title><link>https://cesar.velandia.co/notes/advice-devops/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/advice-devops/</guid><description>This week I was asked a really fundamental question and I totally flunked. I didn&apos;t grasp its importance and here is my attempt to correct that mistake: What advice would</description><pubDate>Thu, 22 Apr 2021 04:42:52 GMT</pubDate><category>DevOps</category><category>notes</category></item><item><title>Container Security</title><link>https://cesar.velandia.co/notes/container-security/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/container-security/</guid><description>ChallengesTraditional tools aren&apos;t fit to secure containers (and kubernetes): too heavy handed such, e.g., EDR, vulnerability scanners, hostbased firewalls, network forensics, security analytics.Alternative dedicated lightweight tools are being</description><pubDate>Wed, 14 Apr 2021 11:38:01 GMT</pubDate><category>notes</category><category>containers</category><category>security</category></item><item><title>Posture Management</title><link>https://cesar.velandia.co/notes/cloud-sec-posture/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/cloud-sec-posture/</guid><description>Cloud security posture managementWhat is it?Cloud security posture management validates your configuration in cloud environments (usually public clouds), it includes but not limited to: Auditing and monitoring of cloud</description><pubDate>Wed, 07 Apr 2021 07:57:57 GMT</pubDate><category>notes</category><category>security</category></item><item><title>Seeking Wisdom by Peter Bevelin</title><link>https://cesar.velandia.co/books/seeking-wisdom/</link><guid isPermaLink="true">https://cesar.velandia.co/books/seeking-wisdom/</guid><description>https://m.media-amazon.com/images/S/compressed. photo.goodreads.com/books/1330087550i/1995421.jpgfrom Darwin to MungerWisdom seeker makes an attempt to understand how the likes of naturalist Charles Darwin</description><pubDate>Tue, 05 Jan 2021 07:31:12 GMT</pubDate><category>book notes</category><category>mindset</category></item><item><title>Best of AWS re:Invent</title><link>https://cesar.velandia.co/notes/best-aws-reinvent/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/best-aws-reinvent/</guid><description>2020Zero Trust: An AWS perspective – Quint Van DemanTen easy and effective ways to secure your AWS environment – Becky WeissSecurity best practices the AWS Well-Architected way – Ben Potter2019CI/CD for serverless</description><pubDate>Fri, 01 Jan 2021 09:49:00 GMT</pubDate><category>notes</category><category>AWS</category></item><item><title>Well-Architected Framework</title><link>https://cesar.velandia.co/notes/well-architected-framework/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/well-architected-framework/</guid><description>AWS Well-Architected FrameworkDesign PrinciplesAWS...Cost OptimizationCost OptimizationPerformance EfficiencyPerformance Effi...OperationalExcellenceOperational...SecuritySecurityReliabilityReliabilityPerform OperationsAs CodePerform Operations...Annotate Documentation Annotate Documen...Make Frequent, Small Reversible ChangesMake Frequent, S...Refine Operations Procedures FrequentlyRefine Operations</description><pubDate>Thu, 24 Dec 2020 06:57:00 GMT</pubDate><category>notes</category><category>AWS</category></item><item><title>Cloud Native Security</title><link>https://cesar.velandia.co/notes/cloud-native-security/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/cloud-native-security/</guid><description>Intro[TK] Reports Snyk - State of Cloud Native Application SecurityCloud Native Application Security Report | SnykNew research reveals 60% of organizations have increased security concerns since adopting cloud native. Read</description><pubDate>Tue, 01 Dec 2020 06:08:00 GMT</pubDate><category>notes</category><category>security</category></item><item><title>3 Lessons from the Daily Stoic Challenge</title><link>https://cesar.velandia.co/notes/daily-stoic/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/daily-stoic/</guid><description>I took the daily stoic challenge this summer. It is a 10-day program developed by author Ryan Holiday that will encourage you to implement ideas from the stoics into your</description><pubDate>Tue, 29 Sep 2020 08:16:00 GMT</pubDate><category>personal-growth</category><category>notes</category></item><item><title>Kubernetes (CKA/S) certifications</title><link>https://cesar.velandia.co/notes/cka/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/cka/</guid><description>⚠️ This information might have changed in newer versions of the certification examsIntroductionThe Linux foundation provides quite a few certifications and some of the most looked after are related to Kubernetes.</description><pubDate>Mon, 13 Jul 2020 07:32:00 GMT</pubDate><category>notes</category><category>certifications</category><category>containers</category></item><item><title>Docker</title><link>https://cesar.velandia.co/notes/docker/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/docker/</guid><description>Getting startedImages are the blueprint to instantiate containers that are built, run, and distributed by the Docker Daemon, which used via a Docker Client and pull images from a registry</description><pubDate>Thu, 18 Jun 2020 02:14:19 GMT</pubDate><category>notes</category><category>containers</category></item><item><title>GitOps</title><link>https://cesar.velandia.co/notes/gitops/</link><guid isPermaLink="true">https://cesar.velandia.co/notes/gitops/</guid><description>Standarized workflow to deploy, configure, monitor, update IaaC – the repository contains declarative descriptions of the desired state of the infrastructure ... and automation makes the production enviroment match the repositoryState is</description><pubDate>Mon, 15 Jun 2020 09:40:00 GMT</pubDate><category>notes</category><category>DevOps</category></item></channel></rss>