Bassam Ismail

Writing

Notes on engineering, leadership, and the craft.

Series

Production Observability at System Boundaries
Field notes on proving telemetry across proxies, runtimes, queues, edge controls, and production logs without confusing configuration with evidence.
7 parts
Mobile Release Engineering
Field-tested release engineering across iOS, Android, and macOS: promotion gates, build economics, signing custody, immutable artifacts, and user-installable proof.
5 parts
Forward Deployed Engineering
A field-engineering series about customer-embedded discovery, production rollout, access, knowledge transfer, and the product feedback loops that turn one deployment into reusable leverage.
11 parts
Agent Operating Notes
Short operating notes from redacted Claude and Codex sessions: boundaries, prompts, failure modes, and team practices for AI-assisted engineering.
18 parts
Building a Slack Engineering Agent
How a multi-tenant Slack agent turns an @-mention into a pull request: the end-to-end path, the Postgres-backed task queue, the single policy gate that keeps an autonomous agent safe, and the ports-and-adapters spine that holds it together.
4 parts
A Home for AI Artifacts
The internal platform where the team publishes AI-generated artifacts to durable, authenticated URLs instead of external services: what it does, how it's built on one small box, and the serverless start we walked back.
3 parts
A spare MacBook as a home server
How I turned a spare MacBook into the most useful infrastructure I own: how I reach it with no public address, the background jobs that run my week, the media stack and what I deleted, one dashboard that makes it usable, and the local model, monitoring, and backups that let me trust it.
6 parts
Building a school-assignment assistant for my daughter
Building a private school-assignment assistant for one child: scraping a portal with no API, an LLM that learns to discard, cached summaries, a small agent, and knowing what it costs.
6 parts
Building Press
How I built Press, the editorial engine that writes from my work. One boundary of the system per part.
6 parts

Posts

Replacing Hand-Rolled Acquia Deployments With a CDK-Defined, Verification-Gated Pipeline
Aug 2026·Replace fragile Git deployment scripts with an Acquia deployment pipeline using AWS CDK, supported CLI operations, and verification gates.
Engineering
Replacing Split CI/CD With a Verified CodePipeline-to-Acquia Deployment Path
Aug 2026·Split CI/CD consolidation removes duplicate checks by moving verified Acquia deployments and PR gates into AWS CodePipeline before retiring GitHub Actions.
Engineering
Building a KPDCL Electricity Dashboard Without an API
Aug 2026·A KPDCL electricity dashboard built from Smart BS Plus data, SQLite, and Glance shows how silent SVG and CSS failures can lie while returning 200.
Engineering
Privacy-Safe Caddy Access Logs for Production Debugging
Aug 2026·Build access logging with privacy-safe Caddy records, one-event retrieval, observed retention, and deliberate loss detection.
Engineering
Measure Django Cache Performance Before Adding More Caching
Aug 2026·Measure Django cache performance by matching requests, tracing get, loader, and set stages, and testing whether hits remove limiting work.
Engineering
How to Harden Cloudflare WAF Without Bot Management
Aug 2026·Keep Cloudflare WAF enforcement scope within reviewed evidence using narrow rules, conservative sampling, phase checks, and rollback.
Engineering
Why Configured Telemetry Does Not Prove Production Tracing
Aug 2026·Production tracing records state transitions but cannot make queue commits atomic or prove that retries and side effects are correct.
Engineering
How to Publish Immutable Release Artifacts From a Private Repository
Aug 2026·Publish immutable release artifacts with create-only version keys, OIDC credentials, canonical digests, and ETag-guarded JSON discovery.
Engineering
Why Mobile Releases Should Start From Tags, Not Every Commit
Aug 2026·Use mobile release tags to separate unprivileged verification from protected signing and distribution jobs for iOS and Android.
Engineering
Sign, Package, and Notarize the Exact macOS Artifact Users Install
Aug 2026·Make macOS signing and notarization auditable with path checks, content manifests, inside-out signing, and installed-app verification.
Engineering