Writing

Blog

Thoughts on software, technology, and whatever else I find interesting.

Putting ONNX Runtime Behind a NativeAOT .NET Engine: the On-Device AI Roadmap

The dotnet-native-interop POC was built around one swap-in seam — an ILanguageModel interface that the whole app streams through. This is the plan for what goes behind it: ONNX Runtime for on-device inference in .NET 10, why ONNX fits the NativeAOT/no-cloud constraints, and the toolchain risks that make on-device AI the last and hardest phase. Honest roadmap, with links to the seam and the design spec.

June 5, 2026 · 6 min read

Read the post→

Jun 5, 2026 · 7 min

ONNX Runtime Inside NativeAOT .NET: The Embedding Pipeline, Tensor Plumbing, and Linking Gauntlet

A deep technical design for running ONNX Runtime on-device behind the dotnet-native-interop swap-in seam: the exact embedding pipeline (tokenize → int64 tensors → InferenceSession → mean-pool → L2-normalize → cosine search), OrtValue zero-copy vs DenseTensor, SessionOptions and execution providers on mobile, and the NativeAOT trimming/native-linking gauntlet that makes this the riskiest phase. Real Microsoft.ML.OnnxRuntime C#.

Jun 5, 2026 · 7 min

Two parallel coding agents and one git working tree

If you're dispatching multiple autonomous coding agents in parallel, they probably share a working tree. Mine did. Here's the git mess that taught me to use worktree isolation by default.

Jun 5, 2026 · 9 min

Mobile-first product, web-first revenue

The product belongs on a phone. The store-approval timelines say revenue starts on the web. This is the shape of a release plan that respects both, and the architectural decisions that let them not be in conflict.

Jun 5, 2026 · 7 min

Amend, don't reverse: ADR discipline for fast-moving products

When scope changes, your decisions log is at a fork: edit the original ADR, or add a new one that records what changed and why. Pick the right one and the log stays useful for the next reader.

Jun 5, 2026 · 9 min

Eighteen PRs to first dollar: a weekend shipping Synap's paid-user loop

How I went from "deployed marketing pages" to "paying users can actually use the product" in 48 hours — and the four bug classes I rediscovered along the way.

Jun 5, 2026 · 6 min

The post-checkout problem: bridging Stripe Checkout to your auth

Stripe Checkout completes. The user lands back on your site. Now what? The pattern almost nobody warns you about, and the 30-line endpoint that solves it.

Jun 5, 2026 · 7 min

The two-IAM-roles trap in AWS SSM CD

Your GitHub Actions workflow can send the SSM command and still not be able to read its result. The role that calls SendCommand and the role that calls GetCommandInvocation are conceptually the same thing — but AWS doesn't think so, and your "successful" deploy will hang waiting for a status it can't fetch.

Jun 5, 2026 · 9 min

Embedding a NativeAOT .NET 10 Engine in Native iOS & Android Apps

A proof of concept that embeds one NativeAOT .NET 10 shared library directly inside native iOS and Android apps, reached three ways — in-process FFI, a loopback HTTP server, and an encrypted SQLCipher store — with their costs charted side by side. Here's what it does, and why the missing ASP.NET Core mobile runtime pack and SQLite's missing iOS native library dictated every design choice.

Jun 5, 2026 · 7 min

MapInboundClaims and the bug class of invisible defaults

A JWT containing a `sub` claim arrived at the API. The handler read `nameidentifier`. Both fields existed because Microsoft's JWT library silently rewrote the claim names on the way in. This is a story about one default, and the broader bug class it belongs to.