Software Engineering Blog | Golang, Architecture, Leadership

All Posts AI API Architecture Backend Best Practices Buffalo Canada Career Advice Career Development Career Progression Claude Cloud Infrastructure Code Review Community Concurrency Cursor Delivery Metrics Desktop DevOps Developer Productivity Engineering Culture Engineering Growth Engineering Leadership Engineering Levels Engineering Management File Manager GitHub Go Golang Hexagonal Architecture Interviews Job Search Junior Developer Kubernetes MCP Microservices Model Context Protocol Multi-tenant Networking Open Source OpenClaw OpenTelemetry Performance Platform Engineering Portfolio PostgreSQL REST API Resume Roadmap SQL Injection Scheduler Security Senior Engineer Software Engineering Staff Engineer Staff Meetings System Design Team Culture Technical Debt TimescaleDB Tutorial Wails Web Development pREST pgvector

2026-08-11 • 9 min read

pREST v2.4.1 and v2.4.2: You Cannot Blacklist Your Way Out of SQL Injection

pREST v2.4.1 closes an 8.6 SQL injection in _QUERIES templates and an /_mcp catalog-exposure bypass — then its SQL-keyword blacklist silently blanked 17.5% of one production catalog. v2.4.2 replaces screening with real parameter binding, adds script path-traversal containment, and enforces RFC 7518 minimum JWT key sizes.

pREST PostgreSQL Security SQL Injection Go Open Source MCP

2026-07-27 • 8 min read

Vault: A Search-First File Manager to Replace Finder

Vault is a minimal, cross-platform file manager built around search instead of folder trees — Go and Wails under a React UI, 353ms cold start, ~80MB idle RAM, OS-trash-only deletes, and an MCP server so an AI client can drive it.

Go Wails Desktop File Manager Performance MCP Open Source

2026-07-27 • 8 min read

pREST v2.4.0: pgvector Search, OpenTelemetry, and Six More SQL Injection Fixes

pREST v2.4.0 adds pgvector nearest-neighbor search and distance filtering, opt-in OpenTelemetry tracing/metrics/logs with a local SigNoz stack, and closes six SQL-injection-adjacent security gaps found via advisory review — including a sibling of the v2.3.0 _select fix living in _groupby.

pREST PostgreSQL Security pgvector OpenTelemetry Open Source Go

2026-07-22 • 7 min read

pREST v2.3.0: Critical SQL Injection Fix and the Adapter Registry

pREST v2.3.0 closes an unauthenticated SQL injection in the _select parameter (CVSS 9.8), migrates JWKS handling to jwx v3, and completes the multi-adapter registry that isolates TimescaleDB features from the base Postgres adapter.

pREST PostgreSQL Security Open Source TimescaleDB Go

2026-07-18 • 6 min read

pREST v2.2.0: Studio, Database Queries, and TimescaleDB

pREST 2.2.0 ships an embedded Studio UI, database-backed custom queries, and first-class TimescaleDB support—making instant Postgres APIs easier to explore and operate.

pREST PostgreSQL Open Source API

2026-07-11 • 12 min read

pREST AI Tooling — MCP Adapter, Cursor Plugin, and OpenClaw Skills

pREST AI tooling ships prest-mcp stdio adapter, Cursor plugin rules/skills, and OpenClaw ClawHub skills — read-only PostgreSQL access for agents via the /_mcp endpoint.

Go Open Source PostgreSQL pREST MCP Cursor OpenClaw Model Context Protocol AI

1 2 3 4 5 6