Blog
Reflections from those who build systems that cannot fail
The digital payments law binds no one yet and has no penalties of its own. What the report says and what is worth reviewing in your reconciliation.
· 10 min
Read articleA decision tree for leadership: online or asynchronous first; then REST or gRPC, or queue, callback or event, so the core does not go down.
· 11 min
Read articleREST at the edge, gRPC at the core and an adapter for legacy: criteria, gRPC-Web, transcoding, tools, Spring Boot, Quarkus and Protobuf.
· 15 min
Read articleErrors that teach, retries without duplicates, machine identity and visible limits: what an API needs so an AI agent can use it with control.
· 15 min
Read articleGraalVM, Quarkus, Spring Boot, Java 25's startup cache and CRaC: what each option gains and costs, and which fits your service and your cloud.
· 20 min
Read articleWhen to revalidate the token behind the gateway, how APIs call each other, introspection or local validation, logout and how long a token should last.
· 17 min
Read articleWhat Prometheus, Loki, Tempo and Grafana answer, how metrics, traces and logs connect, and when to read logs with an agent or instrument with OpenTelemetry.
· 17 min
Read articleHigh coverage and a green quality gate aren't enough: test types, doubles that hide failures, mutation, AI and documentation for tests that catch errors.
· 16 min
Read articleWhen to move in stages with deliverables (V-model) and when in sprints with Scrum, what each asks of your team, and how to combine them.
· 7 min
Read articleWhen a desktop application makes sense to connect printers, readers, scales or local files on Windows, macOS and Linux, without replacing your web system.
· 4 min
Read articleComponents, design system, testing, accessibility, CI/CD, SEO, performance and security: what a CTO should demand of a frontend before launch.
· 11 min
Read articleSPA, server, static, islands, microfrontends, desktop and mobile: when each frontend architecture fits your business and how to migrate without rewriting.
· 11 min
Read articleWhat Mexican regulation really asks of infrastructure, what comes insecure out of the box in your own Kubernetes, and how to build a path to production your auditor can review.
· 6 min
Read articleStorybook is not a gallery of buttons: it is the behavior reference between design, development and QA. How to organize it by layers, what to document in each story and what to review before publishing.
· 6 min
Read articleWhat an MCP is, which controls it needs in a regulated industry, and how it applies to banking, insurance, ERP-run companies and retail. A guide for executives, with sources.
· 8 min
Read articleThe conversation is no longer whether generative AI can answer questions, but whether an organization is ready to operate with agents that understand context, data and real processes. For us, that was the most important message from Salesforce Agentforce World Tour Mexico 2026.
· 7 min
Read articleNearshore for critical software is not the same as generic outsourcing. The difference is not in the hourly rate — it is in domain knowledge density, real-time communication capability and regulatory alignment.
· 7 min
Read articleCredential fragmentation is a security risk in financial services that SSO with SAML 2.0 helps reduce — but correct implementation has more nuances than tutorials show.
· 10 min
Read articleInsurers process simultaneous transactions: enrollments, payments, claims. Kafka is not a trend — it is a pattern that decouples those flows; traceability and consistency are designed with it, they do not come on their own.
· 8 min
Read articleLanguages and backendIntermediate
From zero to your first complete program · 8 lessons
It doesn't teach syntax: it teaches you to see the errors you can't see.
Languages and backendIntermediate
The second step, after Go · 9 lessons
It teaches what Rust does differently from Go: who owns each piece of data and which errors the compiler catches before running.
Languages and backendIntermediate
For those coming from Go or JavaScript · 10 lessons
Types don't exist at runtime: it teaches what they protect, what they don't, and how to validate data that arrives from outside.