Insights
Technical, verifiable field notes — not marketing content. First articles in preparation.
2026
webMethods 10.15: the admin REST API's traps (and how to work around them)Upcoming
Wrapped policy bodies, base64 aliases, endpoints that answer 200 while doing nothing: a field guide to the admin API’s undocumented behaviors, verified one by one.
2026
Zero-downtime OAuth2 rotation: the overlap strategyUpcoming
Rotating client credentials with no interruption window: two strategies valid in parallel, retirement after cutover, and the ghost caches waiting to bite.
2026
GitOps for APIM: enforcing security as a function of integrityUpcoming
An API whose definition no longer matches what runs is not governed. How to refuse the deployment rather than observe the drift — fail-closed, at apply time.