Securing Git Commits with GPG and YubiKeys: Best Practices for 2026


I design and build cloud systems and AI applications for enterprise. My background spans architecture, hands-on engineering, and the messy human work of getting technology adopted at scale.
Currently I'm focused on agentic systems, and how they help organizations turn complex technology into real business value.


How a burnt-out AI skeptic became a believer. Comparing Claude Code and GitHub Copilot, why the collaborative agent experience — not the underlying model — made me 2x faster and brought back the joy of coding.
Since I worked as an architect in the compliant financial industry, I have been signing my git commits so that people cannot impersonate me in source code. I have always defaulted to a single GPG personal key that I could also use for both personal and work. But suddenly I needed to juggle two keys.

DevOps.js Conference, Virtual | March 29 2021
One app is easy to automate; add components, infrastructure and teams and you're lost. How many pipelines and repos do you need? Criteria to slice your pipelines without spaghettifying them.

NodeConf EU, Kilkenny, Ireland | November 10-14 2019
Monitoring tools drown you in information. Building a microservice architecture visualization with d3.js and live monitoring, then watching your architecture dance in real time.

EnterJS Conference, Darmstadt, Germany | June 21 2018
JavaScript's quirks make CI/CD tricky. What do you compile, when, and where? A look at full-stack JS pipelines and the common challenges. We'll laugh and cry.