Ricardo SaadPlatform engineering, infrastructure decisions, and the lessons between them.https://ricardosaad.com/Access is a product, not a firewall rulehttps://ricardosaad.com/blog/access-is-a-product-not-a-firewall-rule/https://ricardosaad.com/blog/access-is-a-product-not-a-firewall-rule/Why the right private-access decision can be to stop maintaining the mechanism and start designing the experience.Tue, 04 Aug 2026 00:00:00 GMTPlatform engineeringNetworkingProduct designOperationsA stopping condition is part of the designhttps://ricardosaad.com/blog/a-stopping-condition-is-part-of-the-design/https://ricardosaad.com/blog/a-stopping-condition-is-part-of-the-design/A credible delivery plan says what blocks promotion, what evidence would unblock it, and where more effort stops changing the decision.Mon, 03 Aug 2026 00:00:00 GMTEngineering leadershipDeliveryRiskEvidenceAI should explain the evidence, not become the evidencehttps://ricardosaad.com/blog/ai-should-explain-the-evidence-not-become-the-evidence/https://ricardosaad.com/blog/ai-should-explain-the-evidence-not-become-the-evidence/In a cloud audit, deterministic collectors and rules should establish findings while AI helps people understand what those records mean.Mon, 03 Aug 2026 00:00:00 GMTArtificial intelligenceProduct engineeringCloud securityEvidenceRecovery is part of the systemhttps://ricardosaad.com/blog/recovery-is-part-of-the-system/https://ricardosaad.com/blog/recovery-is-part-of-the-system/A production rebuild exposed why teardown, dependency ordering, bootstrap safety, and content restoration belong in the design—not in an emergency notebook.Mon, 03 Aug 2026 00:00:00 GMTIncident responseAWSInfrastructure as codeOperationsThe plan you reviewed should be the plan you applyhttps://ricardosaad.com/blog/the-plan-you-reviewed-should-be-the-plan-you-apply/https://ricardosaad.com/blog/the-plan-you-reviewed-should-be-the-plan-you-apply/Infrastructure approval is meaningful only when reviewable configuration, source, and the applied plan remain cryptographically bound.Mon, 03 Aug 2026 00:00:00 GMTInfrastructure as codeGovernanceDeliveryTwo schedulers are not high availabilityhttps://ricardosaad.com/blog/two-schedulers-are-not-high-availability/https://ricardosaad.com/blog/two-schedulers-are-not-high-availability/When a cloud control plane places work onto Proxmox capacity, allowing both layers to schedule the same guest creates conflicting authority—not resilience.Mon, 03 Aug 2026 00:00:00 GMTPlatform engineeringEdgeSchedulingReliabilityYour CRM should know the customer, not run the producthttps://ricardosaad.com/blog/your-crm-should-know-the-customer-not-run-the-product/https://ricardosaad.com/blog/your-crm-should-know-the-customer-not-run-the-product/Commercial context belongs in the CRM. Questionnaire state, report generation, delivery, and recovery belong with the product that promises them.Mon, 03 Aug 2026 00:00:00 GMTProduct architectureCRMReliabilityData governanceThe gateway needed its own boundaryhttps://ricardosaad.com/blog/the-gateway-needed-its-own-boundary/https://ricardosaad.com/blog/the-gateway-needed-its-own-boundary/A private release repository separates the gateway appliance from the public infrastructure that surrounds it.Sat, 01 Aug 2026 16:50:00 GMTInfrastructureNetworkingSecurityRelease engineeringThe pipeline was the producthttps://ricardosaad.com/blog/the-pipeline-was-the-product/https://ricardosaad.com/blog/the-pipeline-was-the-product/What an impossible forecasting problem taught me about evidence, operational boundaries, and knowing when to stop.Sat, 01 Aug 2026 08:30:00 GMTMLOpsMachine learningAWSInfrastructure as codeOperationsAn architecture should be allowed to changehttps://ricardosaad.com/blog/an-architecture-should-be-allowed-to-change/https://ricardosaad.com/blog/an-architecture-should-be-allowed-to-change/Superseded decisions are evidence of learning, not defects to hide behind a tidy final diagram.Thu, 30 Jul 2026 13:00:00 GMTArchitectureCostBuild the gateway to be replacedhttps://ricardosaad.com/blog/build-the-gateway-to-be-replaced/https://ricardosaad.com/blog/build-the-gateway-to-be-replaced/A small network gateway becomes safer when recovery means reconciliation, not careful repair.Thu, 30 Jul 2026 12:00:00 GMTNetworkingReliabilitySecrets should live with their failure domainhttps://ricardosaad.com/blog/secrets-should-live-with-their-failure-domain/https://ricardosaad.com/blog/secrets-should-live-with-their-failure-domain/Centralizing every secret can simplify the diagram while making recovery, authority, and outages harder to reason about.Thu, 30 Jul 2026 11:00:00 GMTSecurityOperationsPrivate is not a login statehttps://ricardosaad.com/blog/private-is-not-a-login-state/https://ricardosaad.com/blog/private-is-not-a-login-state/Authentication answers who a caller is. Network structure should still decide which doors exist.Thu, 30 Jul 2026 10:00:00 GMTNetworkingSecurityAn approval email should not approve anythinghttps://ricardosaad.com/blog/an-approval-email-should-not-approve-anything/https://ricardosaad.com/blog/an-approval-email-should-not-approve-anything/Notifications can carry context. Authority should remain behind the boundary where the decision belongs.Thu, 30 Jul 2026 09:00:00 GMTIdentitySecurityPublic code, private inventoryhttps://ricardosaad.com/blog/public-code-private-inventory/https://ricardosaad.com/blog/public-code-private-inventory/Open infrastructure is most useful when reusable mechanisms are separated from the identities and facts of one real deployment.Thu, 30 Jul 2026 08:00:00 GMTOpen sourceArchitectureScale to zero without giving up controlhttps://ricardosaad.com/blog/scale-to-zero-without-giving-up-control/https://ricardosaad.com/blog/scale-to-zero-without-giving-up-control/An on-demand server still needs durable identity, narrow access, and one authority for its lifecycle.Thu, 30 Jul 2026 07:00:00 GMTCloudOperationsTerraform builds the stage, not the playhttps://ricardosaad.com/blog/terraform-builds-the-stage-not-the-play/https://ricardosaad.com/blog/terraform-builds-the-stage-not-the-play/Infrastructure code should define durable boundaries without becoming the runtime operator for every changing thing.Thu, 30 Jul 2026 06:00:00 GMTInfrastructure as codeControl planesThe safest form can be no form yethttps://ricardosaad.com/blog/the-safest-form-can-be-no-form-yet/https://ricardosaad.com/blog/the-safest-form-can-be-no-form-yet/Deferring a small public feature is an architecture decision when its abuse, privacy, and authority costs are not small.Thu, 30 Jul 2026 05:00:00 GMTProduct engineeringSecurityOne interface, three trust levelshttps://ricardosaad.com/blog/one-interface-three-trust-levels/https://ricardosaad.com/blog/one-interface-three-trust-levels/A shared frontend does not require a shared trust boundary. The useful separation happens in projections, paths, and server-side capability checks.Wed, 29 Jul 2026 00:00:00 GMTArchitectureAuthorizationThe cloud decides; the edge executeshttps://ricardosaad.com/blog/the-cloud-decides-the-edge-executes/https://ricardosaad.com/blog/the-cloud-decides-the-edge-executes/How to keep storage-adjacent services at home without quietly creating a second control plane.Sun, 26 Jul 2026 00:00:00 GMTPlatform engineeringEdgeFailure should be visible, not invasivehttps://ricardosaad.com/blog/failure-should-be-visible-not-invasive/https://ricardosaad.com/blog/failure-should-be-visible-not-invasive/A public status view should prove the system is alive without turning operational detail into an attack surface.Wed, 22 Jul 2026 00:00:00 GMTObservabilitySecurity