Series
Multi-part guides meant to be read in order, each building on the last.
Minimal APIs in Production
2 parts · updated July 10, 2026
Taking .NET Minimal APIs from a single-file demo to a maintainable, secured, observable production service.
- 1. Structuring a .NET Minimal API Project That Survives Growth
Program.cs stops scaling around twenty endpoints. Here is a vertical-slice layout for Minimal APIs that keeps routing, validation and handlers organised.
- 2. How to Secure a .NET Minimal API with JWT Bearer Authentication
A working JWT bearer auth setup for ASP.NET Core Minimal APIs — token validation, role policies, and the config mistakes that silently disable security.
AGENTS.md & GitHub Copilot
13 parts · updated June 3, 2026
Giving AI coding agents the context they need: custom instructions, AGENTS.md, Copilot Skills, hooks, code review, and the token budget behind it all.
- 1. What Is GitHub Copilot Custom Instructions? (And Why Your Project Needs One)
GitHub Copilot custom instructions explained with a real Flutter app you can clone: what the file is, why every project needs one, and beginner mistakes.
- 2. AGENTS.md in 2026: The One File Every AI-Assisted Developer Actually Needs
AI agents write more code each month than teams can review by hand. AGENTS.md is the one file that keeps it consistent — solo, team or enterprise.
- 3. The Complete AGENTS.md Playbook: Build AI Coding Agents That Work Like Your Best Engineer
What belongs in an AGENTS.md file — architecture, security, testing, AI rules — plus what to leave out, common mistakes and a reusable template.
- 4. GitHub Copilot Skills Deep Dive: The Missing Layer Between Prompts, Instructions, and Agents
GitHub Copilot Skills explained by an architect — what they are, how they differ from prompts and instructions, and how to build reusable Skills for teams.
- 5. Building Your First GitHub Copilot Skill: A .NET Clean Architecture SKILL.md, Start to Finish
A build-along for .NET developers — create one GitHub Copilot Skill (SKILL.md) that enforces Clean Architecture, CQRS and your API contract.
- 6. Building a Flutter Copilot Skill: Clean Architecture with BLoC and Firebase, Start to Finish
Build one GitHub Copilot Skill (SKILL.md) so Copilot writes Flutter the way your app does — layered folders, BLoC state, Firebase behind a repository.
- 7. Building an Azure Copilot Skill: Secure, Cost-Aware Cloud Baselines with Bicep, Start to Finish
Build one GitHub Copilot Skill (SKILL.md) that guards your Azure Bicep — Managed Identity, private networking and cost tiers Copilot will not violate.
- 8. GitHub Copilot Can't Replace Your Code Reviewer — Here's What It Can Actually Automate
A software architect on GitHub Copilot code review — build a Skill that automates the mechanical layer, and the limits that keep a human in the loop.
- 9. GitHub Copilot PR Summary: How to Get Descriptions Reviewers Actually Read
The GitHub Copilot PR summary: why an auto-generated description that restates the diff is noise, and how to get one reviewers actually read.
- 10. GitHub Copilot Hooks for Beginners: Why You Need Them and What You Can Build
A beginner GitHub Copilot Hooks tutorial: what a hook is, why an AI agent needs deterministic guardrails, and how to write your first one in ten minutes.
- 11. What Is an AI Token? Why Every AI Cost Is Calculated in Them
Tokens are not words, and they are not characters. Here is what a token really is, why AI billing counts them, and how to work out the cost of a request.
- 12. 400K AI Tokens a Month: My Daily GitHub Copilot Workflow That Makes the Budget Last
A 400K monthly AI token budget sounds generous until agent mode eats it in a week. Here is the daily Copilot workflow I use to make it last the month.
- 13. How to Save AI Tokens: 15 Habits That Cut My Copilot Context Waste
Fifteen tested habits that cut my monthly AI token usage without cutting how much I use AI, from context discipline to knowing when to restart a chat.
Zero to Production AI Agents
2 parts · updated August 5, 2026
Azure AI Foundry from first principles to multi-agent: the platform, function tools in ASP.NET Core, a Flutter client, security, MCP and handoff.
- 1. What Is Microsoft Foundry (Azure AI Foundry)? The Services, and When You Actually Need Them
A plain tour of Microsoft Foundry for developers: the resource, projects, models, agents, tools, and when Azure OpenAI on its own is enough.
- 2. From Search Box to AI Agent: Microsoft Foundry (Azure AI Foundry) for a Food Delivery App
The business case for an AI agent on an app that already exists, what an agent really is, and the architecture that keeps it inside its lane.
Legacy Modernization with GitHub Copilot
2 parts · updated June 9, 2026
A decade-old codebase nobody documented, and the AI development team that makes it safe to change: discovery, tests, security, orchestration.
- 1. GitHub Copilot Agents for Legacy Applications: A Complete Guide to Building an AI-Powered Development Team
A handbook for GitHub Copilot Agents on legacy code: what is a real feature, what is a pattern, and how to build an AI development team around it.
- 2. Making GitHub Copilot Understand a Legacy Codebase Nobody Documented
A repeatable method for legacy discovery: turning the business rules, workflows and history a codebase never documented into knowledge Copilot uses.
Securing a Mobile App on Azure
2 parts · updated August 18, 2026
A working mobile app secured end to end on Azure — the key that should never ship, the layers between the app and the database, and what actually happens when you tap Sign in.
- 1. Your Mobile App Is Leaking Its API Key — and Obfuscation Will Not Save It
An APK or IPA is a zip file. Anything hardcoded inside it, including your API key, is already public — and here is how to get it off the phone for good.
- 2. How Azure Protects a Mobile App: The Full Request Flow, Layer by Layer
Front Door, your API, Microsoft Entra ID, authorization and a private database — the five layers that stand between a mobile app and its data on Azure.
Get new posts by email
New technical articles, Azure AI and GitHub Copilot updates, and upcoming events. No spam, unsubscribe anytime.