I built a reproducible lab with Spring Boot 3.5, Java 21, AppCDS, AOT, and GraalVM Native. The conclusion isn't that native wins or that classic JVM loses: it's that in 2026, comparing only startup time is the fastest way to make an architecture decision with incomplete data.
May 17 2026 · 5′ · Experiments · Performance · arquitectura
Locking down Actuator endpoints isn't enough. After the incident, I rebuilt the authorization model from scratch: explicit SecurityFilterChain, separate health groups, roles for /metrics and /env, and real validation with curl. This is what's still standing.
May 12 2026 · 7′ · Experiments · devops · backend
After publishing my Jakarta EE vs Spring Boot analysis, I audited Actuator's defaults on a backend I own and found sensitive endpoints wide open — ones I never consciously configured. Here's the hardening checklist I built afterward.
May 11 2026 · 7′ · Experiments · devops · backend
Architecture, real systems, product decisions and technical lessons. Everything reviewed with my own judgment before it ships.
204 articles published