Posts
Mastering Zero Data Retention: The Guide to Modified Abuse Monitoring in Azure OpenAI
Your GDPR review is two weeks out. Someone asks whether Azure OpenAI retains prompts. You check the docs. There it is, in plain language: prompts and completions are stored for up to 30 days in Microsoft-operated infrastructure — outside your Azure tenant, not queryable, not deletable. Every …
Escaping Parameter Hell: Architectural Patterns for Nested Templates
It starts with a simple “Stage” template. Then you add a “Job” template. Then a “Step” template. By the time you reach the fifth layer of nesting, you are manually declaring 40 parameters at every level just to pass a single environment name to a deep-nested …
Hub-and-Spoke Networking for Azure Landing Zones: Azure Firewall, Bastion, and Private DNS
Your new workload team files their first support ticket three weeks after go-live. A developer can’t reach the database. You pull the logs. The VM is making an outbound call to a public IP on port 1433—in plain text, no firewall inspection, straight out to the internet. You ask who approved …
Mastering the OpenCode Terminal User Interface
Ollama is running. The model loaded. You’ve confirmed it generates clean code from the command line. Now you open a coding session and immediately hit the workflow problem: you type a prompt in one terminal, copy the output, switch to your editor, paste it, check the line numbers, realize …
GitHub Copilot Enterprise Governance: Content Exclusions & Policy Controls
Someone on your team opens a pull request. Copilot Chat is active, the monorepo is open in their IDE, and they type @workspace. In that moment, Copilot has context over your Terraform modules with embedded policy logic, your Bicep templates with subscription IDs, your internal SDK with proprietary …
templateContext Deep Dive: Bundling Metadata with Jobs and Stages
You are building a central template that accepts a list of jobs. But you need each job to carry its own “owner” email and “security_tier” without forcing every developer to use a custom job schema. You try adding these as parameters, but Azure DevOps throws a schema …
Identity and Access Architecture for Azure Landing Zones: Entra ID, RBAC, and PIM
The security team’s Slack message arrives on a Tuesday afternoon: “We’re seeing resource deletions in prod. Investigating.” Your heart rate goes up. You pull the Azure Activity Log. The deletions are attributed to a service principal—one your team created eight months ago for …
The Best 7B and 8B Code Models for Local Development in 2026
You’ve configured Ollama, built a custom Modelfile, and wired it to OpenCode. The stack works. Then you ask the model to generate a React component using the use() hook from React 19, and it confidently produces code using patterns from React 16. You try a Rust async function with 2024 edition …
Keyless AI: Using Entra ID Managed Identities for Azure OpenAI
You followed the quickstart. You grabbed the key from the portal, pasted it into a .env file, and your app worked. Now that key lives on your laptop, in your CI/CD secrets, probably in a Slack message from six months ago, and quite possibly in a git log you haven’t checked. It does not expire. …








