2026-09-19
Who decides the business rules when AI writes the code?
Passing tests can hide an unresolved business decision. An order-address example shows why AI-assisted delivery needs clear ownership and current acceptance criteria.
Read →4 min
Technical Details
Notes from the workbench
Hands-on tutorials and deep dives accumulated over the years — Go, Linux, Docker, web fundamentals, and the occasional sharp edge. Practical, tested, and kept indexed so the useful bits stay findable.
Browse by topic
2026(4)
2026-09-08
Agent Security Does Not End with Model Choice: Lessons from METR’s Two Security Incidents
METR’s two security incidents show why AI agents need authentication, scoped permissions, secrets management, spending limits, and data isolation designed together.
Read →9 min
2026-08-27
Why I Retired Some of My Technical Articles
Why I retired a group of older technical guides, how I made the decision, and what happens to their former URLs.
Read →4 min
2026-08-18
Do You Need a Paid CMP for Google Consent Mode v2?
A developer's investigation of paid, free, open-source and custom CMP options for Google Consent Mode v2 while migrating global sites from WordPress to Next.js.
Read →19 min
2023(3)
2023-01-15
CI/CD for PHP: A Comprehensive Guide
Learn how to build a PHP CI/CD pipeline that installs dependencies, runs static analysis and tests, and hands verified code to a controlled deployment.
Read →8 min
2023-01-11
PHP-ML in a PHP Application: A Bounded Decision Guide
When PHP-ML is a reasonable fit for a PHP application, when a separate model-serving path is more responsible, and which operating tradeoffs should decide.
Read →7 min
2023-01-09
PHP Certifications in 2026: What Is Official, What Is Useful, and What to Avoid
A 2026 decision guide to Zend, Symfony, and W3Schools credentials, Laravel's no-certification position, and when a portfolio is the better bet.
Read →8 min
2022(4)
2022-05-17
Headless WordPress: What It Is and When the Extra Work Pays Off
What Headless WordPress is, what it changes, and when the extra frontend, integration, preview, and deployment work is justified.
Read →7 min
2022-05-12
Is JWT Safe or Is It Vulnerable?
JSON Web Tokens (JWT) are incredibly popular, but are they safe? Explore stateless session vulnerabilities, leaked tokens, storage exploits, and design gotchas.
Read →7 min
2022-05-11
Hello World: A New Multilingual Journey
A short note marking the 2022 launch of the English section of evrenbal.com.
Read →1 min
2022-04-08
What is ECMAScript? What is not?
Understand the relationship between ECMAScript and JavaScript, clarify versioning (ES6 to ES2026+), and learn when you actually need transpilers.
Read →4 min