Systemics Resources
Field notes from production AI work.
Interactive FinOps, M&A valuation, and ROI calculators alongside production guides, checklists, and working frameworks for regulated industries. Every piece leaves you with something you can use whether or not we ever work together.
43 of 43 resources
Production AI Blueprint, Prompt & Terraform Snippet Repository
Browse and one-click copy production-hardened RAG citation prompts, LLM-as-Judge CI graders, air-gapped AWS VPC PrivateLink Terraform templates, Karpenter GPU NodePools, and OpenFGA ReBAC schemas from our v2026.11 Implementation Kit.
LLM FinOps & Self-Hosting Breakeven Modeler
Model your 24-month token economics across commercial APIs (GPT-5.6, Claude Opus 5 / Sonnet 5, Qwen3.8, DeepSeek V4), FinOps-optimized hybrid routing, and sovereign vLLM GPU clusters (L40S, H100, H200, B200).
M&A AI Valuation & Technical Debt Haircut Modeler
Stress-test an acquisition target's AI claims before LOI. Quantify inference COGS drag, wrapper-moat risk, compliance remediation CapEx, and risk-adjusted EV/ARR multiples.
Regulated AI ROI & Sovereignty Risk Modeler
Calculate 18-month NPV, analyst/clinician cycle-time savings, payback horizon, and avoided regulatory exposure (HIPAA, SOC 2, FINRA, PCI) for sovereign RAG and voice deployments.
Systemics FP&A: 18-Month Scenario & Monte Carlo Workbench
Full multi-scenario financial planning workbench with 18-month burn/runway projections, Monte Carlo sensitivity simulations, and PE waterfall modeling.
A FinOps Loop for AI Workloads That Survives Past the First Cleanup
Most AI cost programs are one-time cleanups and the bill drifts back within a quarter. The weekly loop I run instead: attribution, anomaly detection on billing data, ranked levers, budgets as code.
Kill-Switch Architecture: Designing AI Systems No Vendor Can Hold Hostage
AI vendor lock-in is a design decision, not a fate. Exit plans, abstraction layers, portable prompts and evals, and tested failovers for regulated industries.
LLM Cost Levers, Ranked by Typical Impact
The five levers that move an LLM bill, honest savings ranges, a routing table template, and the breakeven math for when fine-tuning beats prompting.
The LLM Cost Optimization Guide: The Ranked Stack That Actually Moves the Bill
Reduce LLM costs with the five levers that actually move the bill: routing, caching, quantization, spot capacity, prompt discipline. Honest ranges, real math.
Open-Weight Isn't Cheap and Closed Isn't Doomed: The AI Price War by the Numbers
Kimi K3 priced itself like a frontier model, two leaderboards disagree by twenty ranks on the same product, and committed GPU capacity got more expensive while spot prices fell. What the token economics actually say about build vs buy.
The A2A Protocol, Sixteen Months In: What Agent-to-Agent Interop Actually Looks Like
A practitioner's reading of the Agent2Agent protocol as of August 2026: where it came from, what v1.0 changed, the implementation patterns that matter, and the trust problems nobody has solved yet.
Reference Architecture: Agentic Traffic Gateway: One control point for LLM, MCP, and A2A traffic with policy enforcement and tracing
One control point for LLM, MCP, and A2A traffic with policy enforcement and tracing
Anthropic Is Building Its Own Chips Now. Every Frontier Lab Is a Silicon Company.
Anthropic confirmed this week it is staffing a custom silicon team to co-design chips with Claude, the clearest sign yet that renting Nvidia is no longer a complete strategy.
Qwen3.8-Max Claims Ten Days of Autonomous Coding. The Open Weights Will Tell Us If It's Real.
Alibaba's new 2.4T flagship claims 10+ days of self-directed coding and posts near-frontier agentic benchmarks, with open weights landing this week. That last part is what actually matters.
OpenAI's August GPT-5.6 update ships with a 'High capability' label, and that label is the real story
OpenAI's August 6 refresh of GPT-5.6 Sol and Luna brings a reasoning slider and free-tier expansion, but the system card's High capability classification in cyber and bio is what practitioners should read carefully.
OpenAI's S-1 Is Weeks Away, and the Whole Industry Is About to Get Graded
OpenAI's public S-1 filing is expected within weeks ahead of a targeted September IPO, and the numbers inside it will reset how every AI company is valued.
The Senate Just Moved Four Kids-and-AI Bills at Once. The Hard Part Is the Sorting Machine.
The Senate Commerce Committee advanced KOSA and three children's AI bills on August 5, and every one of them depends on knowing which users are minors.
Temporal Best Practices: Durable Execution, Agent Loops, and the Antipatterns That Bite
A practitioner's reference for Temporal in production: the current client landscape, the three patterns worth memorizing with code in Python, Go, Java, and Rust, how agentic workloads map onto durable execution, and the eleven antipatterns that actually cause incidents.
Reference Architecture: Content Engine: Multi-tenant agentic content pipeline from draft to multi-platform publish
Multi-tenant agentic content pipeline from draft to multi-platform publish
Reference Architecture: Atlas: Event-driven engineering management: DORA metrics, PRD intake, and AI agents
Event-driven engineering management: DORA metrics, PRD intake, and AI agents
What I Look for When Reviewing an AI Platform Architecture
Six areas decide whether an AI platform survives contact with production: tenancy, egress control, model routing, observability, kill-switches, and IaC coverage.
Reference Architecture: Inferno: wrk, but for tokens: load testing for OpenAI-compatible inference
wrk, but for tokens: load testing for OpenAI-compatible inference
Reference Architecture: Portcullis: A minimal but serious LLM gateway in Go with a tiny dependency set
A minimal but serious LLM gateway in Go with a tiny dependency set
AI Platform Readiness: A Self-Assessment Across Nine Dimensions
Rate your AI platform across strategy, data, sovereignty, technology, economics, MLOps, identity, compliance, and skills. Four rungs per dimension, with the evidence that separates a claim from a fact.
Making AI Egress Technically Impossible Inside Your VPC
How to prevent data exfiltration from AI workloads in your VPC: egress rules, private endpoints, DNS controls, gateway enforcement. Policy versus physics.
Designing an AI Enablement Program That Changes Behavior, Not Just Attendance
An AI training program for employees that changes behavior, not attendance: role-based curricula, measured adoption, game days, and a 4-week program outline.
Structuring the AI Platform Team: Roles, Ratios, and the First Three Hires
AI platform team structure for mid-market regulated firms: platform vs embedded models, the first three hires in order, and when a fractional architect wins.
The AI Talent Gap in 2026: Hiring Trends, Salary Reality, and the Skills That Matter
AI talent gap hiring trends for 2026: current labor-market data, real salary ranges, the case that the gap is overstated, and a build-buy-partner framework.
The 12 AI Questions Your Board Will Ask (and the Answers That Hold Up)
12 AI governance board of directors questions on data, liability, spend, and oversight, with the evidence that answers each and a quarterly report template.
Data Sovereignty vs Data Residency: the Distinction Your Auditor Cares About
Data sovereignty vs data residency, defined the way your auditor defines them: a decision table, what the law actually requires, and what changes at each level.
Hiring High-Impact AI Engineers: The Skills That Predict Performance
The skills to look for in AI engineers that actually predict performance: evals discipline, systems thinking, cost awareness, and the tests that surface them.
The HIPAA AI Compliance Checklist for 2026
A HIPAA compliant AI checklist for 2026: map each 45 CFR 164.312 safeguard to your AI stack layers, get vendor BAAs right, and see what HHS guidance says.
One Engineer Holds Your AI Platform: Measuring and Fixing Key-Person Risk
Key person risk engineering made measurable: the bus factor numbers, the exposure formula, four fixes ranked by evidence, and a 10-point continuity checklist.
The Production RAG Checklist: from Demo to Governed Retrieval
A production RAG checklist for engineering leads: evals, citations, hybrid search, permission filtering, and freshness gates that govern retrieval go-live.
Shadow AI Is Already in Your Building: Detection and Containment
Shadow AI enterprise risk, quantified: survey data, breach costs, and a detection runbook across network, expense, and browser telemetry you can run Monday.
The Sovereignty Ladder: A 5-Rung Model for AI Data Governance
Self-assess your AI data governance framework against the 5-rung Sovereignty Ladder: pass/fail evidence tests per rung and a one-rung-per-quarter climb plan.
What Is Sovereign AI? A Working Definition for Regulated Industries
What is sovereign AI? A working definition for regulated industries, the five-rung Sovereignty Ladder as a usable framework, and when it is worth paying for.
Reference Architecture: Priivy: A Rust PII detection engine that replaces Presidio at 66x to 1,525x the speed
A Rust PII detection engine that replaces Presidio at 66x to 1,525x the speed
The Guardrail Lockout: When Your AI Provider Refuses Your Incident Response
An autonomous agent breached Hugging Face, then commercial model guardrails blocked the forensic investigation because a filter cannot tell a responder from an attacker. A second model is a continuity control, not a cost play.
Kubernetes GitOps Checklist: ArgoCD, DNS, Secrets, Rollouts
The checklist I run before calling a cluster GitOps-managed: app-of-apps layout, external-dns, secrets handling, progressive rollout gates, and rollback drills that include the ugly cases.
Running Temporal Workers on Kubernetes Without Dropping Activities
Temporal workers look like stateless services and are not. The deployment topology, rollout mechanics, and schedule management that survive production, plus the failures that actually page you.
Temporal Workflow Patterns: Signals, Queries, Updates, and the Rest
The reference card I keep open when writing Temporal workflows in TypeScript: signals vs queries vs updates, retries, heartbeats, child workflows, schedules, versioning.
Reference Architecture: Aegis: The identity layer: OIDC and SCIM SSO, RBAC, and audit for sibling products
The identity layer: OIDC and SCIM SSO, RBAC, and audit for sibling products