Thoughts on software architecture, intelligent engineering, and building DevNitro.
RSS FeedAI-assisted .NET authorization: GCT AccessCheck guards closed real IDOR holes in DevNitro, then a blueprint upgrade run exposed a version bump that never fired.
DevNitro turned .NET security rules into checks this week, with auth canaries, Blazor CSS linting, payment safeguards, and stronger tests.
A security-hardening week in GCT: a centralized sign-in manager, rate limiting, tighter token validation, and closing an authorization gap, plus .NET 10.