Building better platforms with Azure, GitHub, Terraform and AI
Update one pull request comment from GitHub Actions instead of creating duplicates after every push, using a stable marker, ownership checks and a simple upsert pattern.
Part 1 covered the consumption side of an AI gateway: rate limits, token quotas, usage attribution and the telemetry needed to understand them. The next runtime decision is whether a request should be allowed through at all, followed by whether that consumer is entitled to use the model it asked for. Those are separate controls, … Read more
How I would use Azure API Management to control AI request rates and token consumption, attribute usage, emit useful telemetry and handle backend throttling.
Azure Policy and API Management solve different parts of AI governance in Azure. This post goes into the actual policies and APIM XML behind that two-layer model, covering network controls, approved models, token quotas, content safety and observability.
An Azure AI Landing Zone should make the governed route the easiest route for delivery teams. This post covers how Azure API Management, Azure Policy, identity, networking, quotas, telemetry and clear ownership boundaries work together to control AI consumption without turning the platform team into an approval bottleneck.
Measuring AI-assisted engineering by activity alone misses the point. Active users, token usage, generated lines of code, and agent sessions are useful signals, but they do not tell you whether the work was reviewable, trusted, safe, or worth the cost.
This post looks at what platform teams should measure instead: workflow success, review effort, guardrail failures, context reuse, cost per useful outcome, and developer confidence.
The Draw.io MCP Diagramming Agent Skill provides a reusable working method for creating clear, editable diagrams with Draw.io MCP. It supports cloud architectures, network topologies, CI/CD pipelines, Kubernetes platforms, event-driven systems, C4, UML and more, while applying consistent guidance for layout, containment, connector routing, labels and validation.
Agent skills are only useful if the agent knows when to use them. A clear description acts as selection metadata, helping the agent load the right guidance, avoid noisy context, and produce more consistent results across repeated engineering tasks.
A quick HolmesGPT demo using Azure AI Foundry, Azure OpenAI and a local kind cluster. Deploy a deliberately broken Kubernetes pod, ask HolmesGPT to investigate it, and see how it identifies the root cause from the pod spec, scheduler events and cluster state.
Agent skills, custom instructions, and MCP configuration are becoming part of the engineering trust boundary. This post walks through using NVIDIA SkillSpector in GitHub Actions to scan AI skill repositories, surface findings in SARIF or PR comments, and make risky agent behaviour visible during normal review.