Blog | Hammad Haqqani

November 12, 2026Cloud4 min read

Twelve Dockerfile Mistakes: Three That Are Dangerous and Nine That Cost You

A Dockerfile that builds is not a Dockerfile that is safe to run, and it is rarely one that builds quickly. Most of the problems are a single line, and most have been copied from a tutorial. Here are...

Read Article

November 12, 2026Engineering Leadership4 min read

DORA Metrics for Engineering Leaders: Find the Constraint, Not the Score

The four DORA metrics are the closest thing software delivery has to a standard measurement. They are also widely misused: turned into a scorecard, compared across teams, and attached to targets....

Read Article

November 12, 2026Cloud4 min read

Seven IAM Policy Mistakes That Quietly Become Admin Access

Almost nobody writes an over-permissive IAM policy on purpose. It starts narrow, a deploy fails with AccessDenied, someone adds a wildcard to get the release out, and the wildcard stays. Six months...

Read Article

November 12, 2026Cloud4 min read

Your Kubernetes Bill Is Mostly Capacity Nobody Uses

A Kubernetes cluster is sized to fit what pods request, not what they use. That one fact explains most oversized clusters, and it means the bill can be far above the workload without anything being...

Read Article

November 12, 2026Cloud4 min read

Kubernetes Manifest Security: The Problem Is the Lines That Are Missing

Reviewing a Kubernetes manifest for security is harder than reviewing code, because the dangerous version usually looks cleaner. The defaults are permissive, so an insecure Deployment is simply a...

Read Article

November 12, 2026Engineering Leadership4 min read

Your Roadmap Is Planned Against Headcount. Your Team Has Less Than Half of That.

Ten engineers, thirteen weeks. The plan assumes 130 engineer-weeks. The quarter ends with about half the roadmap shipped, and the retrospective blames estimation. Estimation was not the problem. The...

Read Article

November 12, 2026Engineering Leadership4 min read

What an Outage Actually Costs, and How to Explain It to Finance

Reliability work is the hardest engineering investment to fund, because its payoff is an incident that did not happen. Nobody gets a line in the quarterly review for the outage that was avoided. The...

Read Article

November 9, 2026Engineering Leadership6 min read

What Your Code Reviewer Actually Means: 18 Review Comments, Translated

Code review is the only place in software where "LGTM" can mean "I read every line" or "I have a meeting in two minutes," and you are expected to know which. The comments are in English. The meaning...

Read Article

November 8, 2026AI + Cloud9 min read

Claude Projects vs Skills vs CLAUDE.md vs Hooks: Where Each Instruction Actually Belongs

Claude now has at least seven places you can put an instruction: profile preferences, Styles, Projects, Skills, CLAUDE.md, hooks, connectors, and subagents. Every one of them is documented on its...

Read Article

November 8, 2026AI + Cloud9 min read

Claude Usage Limit Reached? Why It Happens So Fast and 11 Ways to Make It Last

"You've reached your usage limit" is one of the most searched Claude messages there is, and most of the advice out there is either a list of prices or "upgrade to Max." Neither explains the thing...

Read Article

November 8, 2026AI + Cloud14 min read

Cloud Security Changed in October 2026. Here's What the Incidents Say DevOps Engineers Need to Do Now

Read the October and November 2026 incident reports back to back and a pattern jumps out. None of the breaches needed a zero-day. They ran on things DevOps teams own: a key that was never revoked, an...

Read Article

November 8, 2026Engineering Leadership5 min read

7 Developer Tools Nobody Asked For (That Your Team Will Use Anyway)

Most of the tools on this site solve a specific problem: count tokens, format YAML, check a Terraform plan. This post is about the other kind. These seven are in the new Just for Fun section of the...

Read Article

November 8, 2026Engineering Leadership5 min read

How Much Does a Meeting Really Cost? The Math, the Hidden Part, and a Free Calculator

Every engineering org has the meeting nobody would approve as a purchase order. A weekly sync with eight people, an hour long, that's been on the calendar since before half the attendees joined....

Read Article

November 8, 2026AI + Cloud5 min read

Remove an Image Background Without Uploading It: How In-Browser AI Works (and the GPU Bug I Hit)

Most free background removers work the same way: you upload your photo to someone's server, their GPU cuts out the subject, and you get back a low-resolution preview unless you pay or sign up. For a...

Read Article

November 8, 2026Cloud5 min read

Is Your VPN Leaking Your Real IP? How WebRTC Leaks Work and How to Test in 10 Seconds

You turn on a VPN, a website shows the VPN server's IP address, and you assume you're covered. Usually you are. But browsers have a second way of discovering your network addresses that doesn't go...

Read Article

September 1, 2026AI + Cloud8 min read

How to Change the Tone of Text Without Sending It to an AI Service

Every AI tone changer works the same way: you paste your text, it goes to a language model somewhere, and a rewritten version comes back. That is fine for a tweet. It is less fine for a performance...

Read Article

September 1, 2026AI + Cloud13 min read

Claude Code Not Working? Every Common Error, Diagnosed and Fixed

The official docs tell you how Claude Code works when it works. This is the other document. What to do when it does not. Every error below is one I have actually hit or been sent by someone else,...

Read Article

August 30, 2026AI + Cloud4 min read

Your AGENTS.md Is Probably Making Your Agent Worse. This Free Linter Shows You Where.

The most counterintuitive finding in agent tooling this year: teams measured LLM-generated AGENTS.md files making their agents worse, with lower task success and higher cost. The culprit wasn't bad...

Read Article

August 30, 2026AI + Cloud6 min read

An AI Wrote My 86 Free Tools. Then I Made It Hunt Its Own Bugs. It Found 60.

The SQL assistant on my site had a bug. When you typed "is null", it generated IS NOT NULL. Inverted. The exact opposite of what you asked for, in a tool whose entire job is producing SQL you paste...

Read Article

August 30, 2026AI + Cloud4 min read

Your Claude Code Session Starts in the Hole. This Free Tool Tells You by How Much.

Paste this into any Claude Code session: /context. Before you've typed a single word of your actual task, you'll see something like 45,000 tokens already spent: system prompt, tool schemas, MCP...

Read Article

August 30, 2026AI + Cloud4 min read

Agent Skills Run in 40 Products Now. Here's a Free SKILL.md Builder That Gets the Spec Right.

The highest-leverage file in agent tooling right now is a markdown file with three lines of YAML on top. A skill costs its host agent one description line at session start; the full procedure loads...

Read Article

August 30, 2026Cloud4 min read

Paste Your Terraform Plan, See Your Blast Radius: A Free Analyzer That Flags What Can Hurt You

Every Terraform incident postmortem contains the same sentence: "the plan was reviewed and approved." The plan is always reviewed. The problem is how: a wall of diff text at the end of a long day,...

Read Article

August 24, 2026AI + Cloud5 min read

Vibe Coding Is Fine. Vibe Infrastructure Will Page You at 3 AM.

Two engineers vibe-code on a Friday afternoon. The first one ships a dashboard widget. The AI wrote it, the demo looked right, they merged it. There's a bug: dates render wrong for timezones east of...

Read Article

August 16, 2026AI + Cloud5 min read

Claude Code Subagents: When to Spawn, When to Stay Single-Threaded

Ask Claude Code to find where rate limiting is implemented in a 400-file codebase and watch your context window. The agent greps, opens eight files, greps again, opens six more. Twenty thousand...

Read Article

July 8, 2026AI + Cloud6 min read

Context Engineering Is Cloud Cost Optimization for Your AI Agent

Run /context in your next Claude Code session before you type anything. Look at the breakdown: system prompt, tool definitions, MCP schemas, CLAUDE.md, memory files. That's your idle spend. You're...

Read Article

July 8, 2026AI + Cloud6 min read

MCP Servers vs. Agent Skills: When to Use Each (And Why the Answer Is Usually Both)

Open a fresh Claude Code session in one of my client repos and run /context. Before I type a single word, tens of thousands of tokens are already spent. Most of that is MCP tool definitions: a GitHub...

Read Article

May 10, 2026AI + Cloud5 min read

Awesome DevOps AI Crossed 219 Tools and a Few Thousand Stars. Here's What Changed in 60 Days.

In March I shipped Awesome DevOps AI, a curated list of AI tools, agents, and resources built for DevOps, SRE, and Platform Engineering. The first version had 100 entries. Sixty days later it has...

Read Article

May 10, 2026AI + Cloud8 min read

The $47K AWS Bill My Claude Code Hook Caught at 2 AM

A client called me at 11:47 PM on a Tuesday. Their staging environment was on fire. Not literally. A Lambda was retrying a request to a third-party API on every cold start, the API was rate-limiting...

Read Article

May 9, 2026AI + Cloud5 min read

How a Claude Code Agent Burned $3,400 Overnight (And the Math to Predict It Before It Happens)

A founder I know left a Claude Code agent running on a refactoring task at 11 PM. The task was a 22-file cross-cutting rename. Nothing exotic. He went to sleep. At 7 AM he woke up to a $3,412 token...

Read Article

May 9, 2026AI + Cloud5 min read

The 7 Claude Code Hooks Every Production Team Should Be Running

A Claude Code agent without hooks is an intern with sudo. It will not be malicious. It will be confidently wrong about rm -rf, git push --force, or terraform destroy. You will find out at 2 AM. Hooks...

Read Article

May 9, 2026Cloud6 min read

Stop Squinting at Cron: A Field Guide for 2026

Cron expressions are the most ubiquitous and least readable string in DevOps. Three decades of muscle memory and most engineers still pause for 10 seconds when they see 0 9 1 1-5. This guide is for...

Read Article

May 9, 2026Cloud4 min read

Your GitHub Actions Bill Is Hiding 30% Waste. Here's the Math.

GitHub Actions billing has four moving parts most teams underestimate: minutes, OS multipliers, matrix expansion, and artifact storage. They compound. The bill arrives at the end of the month and...

Read Article

May 9, 2026AI + Cloud5 min read

How to Write a CLAUDE.md That Doubles Your Agent's Output

CLAUDE.md is the agent's onboarding doc. It is the difference between an agent that asks where db.ts lives every session and an agent that opens it and reads it. I have been writing these for 14...

Read Article

May 9, 2026AI + Cloud4 min read

Your First MCP Server in 12 Minutes (And the Three Configs That Brick Half the Setups I Audit)

MCP (Model Context Protocol) is the standard that lets Claude Code and Claude Desktop talk to external tools, databases, browsers, and APIs. The protocol is good. The config files are where teams...

Read Article

May 9, 2026AI + Cloud5 min read

Migrating from OpenAI to Anthropic in 2026: The Honest Playbook

Half my consulting calls this quarter started the same way: "We have been on the OpenAI SDK for two years. Leadership wants to evaluate Anthropic. What does the migration actually look like?" This is...

Read Article

May 9, 2026AI + Cloud5 min read

Why Your AWS NAT Gateway Bill Is 10x What You Think (And How to Cut It)

NAT Gateway is the single largest hidden line item on most AWS bills under 50K a month. It is not because the per-unit pricing is bad. It is because the pricing has two components that compound and...

Read Article

May 9, 2026Cloud5 min read

The Missing Index Pattern Killing 80% of Postgres Apps (And How to Find Yours in 5 Minutes)

A Postgres database that performs well in development and falls over in production is almost always missing an index. The same five-mistake list shows up in every audit. They are easy to find, easy...

Read Article

May 9, 2026AI + Cloud4 min read

Why the Same Prompt Costs 30% Less on Claude Than on GPT-5: A Tokenizer Story

Every API price comparison you read uses a price-per-million-tokens number. That number is correct, and it is also misleading. Because the same prompt does not become the same number of tokens across...

Read Article

May 7, 2026AI + Cloud8 min read

GPT-5 Code vs Claude Opus 4.7: The 30-Task Production Benchmark Nobody Wanted to Publish

I ran the same 30 production-shaped tasks through GPT-5 (via Codex CLI) and Claude Opus 4.7 (via Claude Code, 1M context, native plan mode). Same prompts. Same repos. Same machine. Same network. Same...

Read Article

May 3, 2026AI + Cloud9 min read

I Audited 12 AI Coding Setups This Spring. Every Single One Was Leaking 5 Figures.

In the last 90 days I sat down with 12 engineering teams who had rolled out Claude Code, Cursor, or both at company scale. Series A through public, four to two hundred engineers, US and EMEA. The...

Read Article

April 28, 2026AI + Cloud9 min read

30 Days of Claude Code in Production: The Receipts Across 7 Projects

Over the last 30 days I ran Claude Code as the primary pair-programmer across seven concurrent projects spanning consumer mobile, backend services, trading automation, personal web, networking,...

Read Article

March 30, 2026AI + Cloud5 min read

I Now Have 75 Free AI Tools Running in Your Browser, Here Are the 4 New Ones Everyone's Asking For

Two months ago I published a post about the 71 free browser-based AI and DevOps tools I built. It got way more attention than I expected. Thousands of developers started using them daily. The most...

Read Article

March 30, 2026AI + Cloud8 min read

BMAD Method: The Framework That Turns Claude Code Into a Complete Agile Development Team

What if Claude Code wasn't just a coding assistant, but an entire agile team? An analyst who gathers requirements. A product manager who writes PRDs. An architect who designs systems. A scrum master...

Read Article

March 30, 2026AI + Cloud6 min read

Superpowers Is the Most Important Open Source Plugin for Claude Code, Here's Why

There are hundreds of Claude Code plugins now. Most of them add a few slash commands and call it a day. Superpowers is different. It's a complete software development methodology that turns Claude...

Read Article

March 30, 2026AI + Cloud19 min read

The Ultimate Vibe Coding Prompt Library: 50 Battle-Tested Prompts for Claude Code, Cursor, and Windsurf

Vibe coding changed how I build software. Instead of typing every line, I describe what I want and an AI agent writes it. But here's the thing nobody talks about: the quality of your prompt...

Read Article

March 30, 2026AI + Cloud7 min read

What Leaked AI System Prompts Reveal About How Claude, ChatGPT, and Gemini Actually Think

In the last few months, system prompts from every major AI tool have leaked onto GitHub. Claude Code, ChatGPT, Gemini, Cursor, Windsurf, Devin, Replit, Lovable, v0, all of them. Repositories like...

Read Article

March 11, 2026AI + Cloud14 min read

How to Use AI Coding Assistants for Infrastructure as Code Without Breaking Production

You've probably tried using ChatGPT or Claude to write Terraform. Maybe you pasted an error message and got back confident-looking code that made things worse. Or you asked it to "create an AWS VPC"...

Read Article

March 11, 2026AI + Cloud13 min read

I Curated 219 AI Tools for DevOps Engineers (And You Can Use Them All for Free)

Over the past 6 months, I've watched the DevOps AI landscape explode from a handful of experimental tools to an overwhelming ecosystem of 500+ products, agents, and frameworks. Every week there's a...

Read Article

March 11, 2026AI + Cloud13 min read

Fine-Tuning vs RAG: The Decision Framework (When to Use Each)

"Should I fine-tune or use RAG?" I've been asked this question 47 times in the past 3 months. Every time, the person asking thinks they need fine-tuning. About 90% of the time, they actually need...

Read Article

March 11, 2026AI + Cloud14 min read

LLM Context Windows and Token Limits: The Complete Guide (2026)

You're halfway through pasting your 50-page architecture document into ChatGPT when it stops responding. Or Claude gives you an error: "Your message exceeds the maximum context length." Or you get...

Read Article

March 11, 2026AI + Security14 min read

Prompt Injection Attacks: What They Are and How to Stop Them (2026 Guide)

Last month, a Fortune 500 company's internal AI chatbot started leaking employee salary data. The cause? A simple prompt injection attack that took 8 seconds to execute. The attack looked like this:...

Read Article

February 16, 2026AI + Cloud17 min read

I Built 71 Free AI and DevOps Tools That Run Entirely in Your Browser

Every week I watch developers paste production secrets into random websites to decode a JWT, estimate token costs by doing math in a spreadsheet, and pay $20/month for a prompt testing tool that...

Read Article

February 16, 2026AI + Cloud23 min read

How to Set Up OpenClaw on macOS and Windows: Your Personal AI Assistant

OpenClaw is an open-source personal AI assistant with over 224,000 GitHub stars. It runs on your own machine, connects to any LLM provider (OpenAI, Anthropic, Google Gemini, Groq, Mistral, Ollama,...

Read Article

February 10, 2026AI + Industry7 min read

The AI Singularity Is Closer Than You Think: Why 2026 Changed Everything

I've spent over a decade building and scaling systems, leading engineering teams, and staying ahead of every technological shift this industry has thrown at us. Cloud computing, DevOps, Kubernetes,...

Read Article

February 9, 2026AI + Cloud32 min read

The Definitive Guide to Setting Up Claude Code on Windows and macOS

I have been using Claude Code every day for over a year to build infrastructure, write Terraform, debug Kubernetes manifests, and ship production code faster than I ever thought possible. This is the...

Read Article

February 8, 2026Cloud9 min read

The Hardcore DevOps Checklist: 2026 Edition

DevOps in 2026 is unrecognizable from five years ago. CI/CD pipelines are self-healing. AI agents are writing and reviewing Terraform. Platform engineering is a real discipline, not a rebranded ops...

Read Article

February 8, 2025AI + Cloud6 min read

How Claude Code and Codex Are Revolutionizing Cloud Infrastructure Engineering

The intersection of artificial intelligence and cloud infrastructure is no longer a futuristic concept -- it's the new reality of DevOps engineering. As someone who has spent over a decade building...

Read Article

February 7, 2025AI + Cloud6 min read

Automating AWS Operations Controls with Claude Code and Infrastructure as Code

Operations controls are the backbone of any secure, well-governed AWS environment. But manually writing Service Control Policies (SCPs), IAM policies, Config rules, and compliance checks across...

Read Article

February 5, 2025AI + Cloud6 min read

Building Self-Healing Infrastructure: Claude Code + CloudWatch + Lambda

What if your infrastructure could detect problems, diagnose root causes, and fix itself -- all before an engineer even gets paged? This isn't science fiction. It's what I've been building using...

Read Article

February 3, 2025AI + Cloud7 min read

Prompt Engineering for Cloud Engineers: Getting the Best from Claude Code

You've started using Claude Code for infrastructure work. You know it can generate Terraform, write CI/CD pipelines, and debug Kubernetes manifests. But are you getting the best output? The...

Read Article

September 16, 2024Career4 min read

How to Ace Your Next Technical Interview

Technical interviews follow patterns. Once you understand the structure, you can prepare systematically instead of hoping for the best. Here's what I've learned from both sides of the interview...

Read Article

May 23, 2024Cloud3 min read

AWS CLI Setup Guide: From Installation to Your First Commands

The AWS CLI is the foundation of any cloud engineer's toolkit. It lets you manage AWS resources from your terminal, automate tasks with scripts, and integrate AWS operations into CI/CD pipelines....

Read Article

May 13, 2024Cloud4 min read

RAG Explained: How Retrieve and Generate Technology Works with Cloud Services

Retrieval Augmented Generation (RAG) is one of the most practical AI patterns for real-world applications. It combines the knowledge-retrieval capabilities of search systems with the natural language...

Read Article

May 8, 2024Cloud4 min read

AIOps: A Practical Guide to AI-Powered IT Operations

AIOps -- Artificial Intelligence for IT Operations -- applies machine learning to the massive volumes of data generated by modern infrastructure. The goal: automate detection, diagnosis, and...

Read Article

May 7, 2024Learning2 min read

Free Resources to Learn Coding and Web Development in 2024

A curated list of the best free platforms for learning programming languages, frameworks, and development tools. Bookmark this and work through them at your own pace. Frontend HTML -- html.com...

Read Article

May 7, 2024Cloud3 min read

Navigating the Cloud: Lessons from a Decade of Public Cloud Engineering

After 10+ years of building on AWS and Azure across financial services, government, and enterprise, here are the real lessons I've learned about cloud transformation -- what works, what doesn't, and...

Read Article