Category
Engineering
Software engineering and architecture — application modernization, microservices, platform engineering, and the practices behind shipping reliable systems.
-
MCP 2026-07-28 lands on 28 July: what breaks, what does not, and how to migrate
The 2026-07-28 MCP revision removes the initialize handshake and the protocol-level session, so any instance can serve any request. The maintainers say nothing switches off on 28 July.
Manu Shukla -
84 malicious npm versions in 6 minutes: the 2026 TanStack trusted-publishing breach and the CI config that stops it
TanStack's release pipeline authenticated 84 malicious npm versions in six minutes using a valid OIDC token. No token was stolen. Here is the chain, and the controls that close it as of July 2026.
Manu Shukla -
10 of 11 AI coding agents failed GuardFall: how to harden the shell guard in 2026
Adversa AI tested 11 open-source coding agents in June 2026 and beat the safety filter on 10 of them with shell tricks that are 30 years old. How the bypass works, which designs held, what to change now.
Manu Shukla -
DPDP compliance costs for Indian startups: what to budget before 13 May 2027
Penalties reach ₹250 crore and full compliance is due 13 May 2027. Vendors quote ₹15 lakh to ₹2 crore. Here is what DPDP compliance actually costs a startup, and which line items you can build yourself.
Manu Shukla -
Data platform engineering for agentic AI in 2026: why 83% of enterprises must upgrade first
Agents run heavy queries across your whole organisation. If the data is fragmented, the agent is guessing. Here is what the data layer needs before an agent is worth deploying.
Manu Shukla -
7 rules for a regression suite that pays for itself in 2026
GitHub reduced hosted runner prices by up to 39% on 1 January 2026, yet a macOS minute still costs $0.062 against $0.006 for Linux. Google found 84% of pass-to-fail transitions were flaky tests. Seven rules for a suite
Manu Shukla -
Ingress-NGINX retired in March 2026: the Gateway API migration plan for 30 annotations
Ingress-NGINX reached end of life in March 2026, and about half of cloud native environments ran it. A tested migration path to Gateway API using ingress2gateway 1.0, including what it cannot translate.
Manu Shukla -
Kubernetes 1.35 pod certificates and constrained impersonation: what they actually fix
Kubernetes 1.35 shipped Pod Certificates at Beta and constrained impersonation at Alpha. Neither is the zero-trust mTLS upgrade the headlines promised, and the KEP says so directly. Here is the real scope.
Manu Shukla -
11 MCP server CVEs in 2026: the hardening configs that stop them
Eleven CVEs landed against Model Context Protocol implementations in April 2026, and Anthropic called the underlying STDIO behaviour expected. Here is what that means for anyone running MCP servers in production
Manu Shukla -
npm 12 shipped on 8 July 2026 with install scripts off by default: the CI fix
npm 12 is generally available and tagged latest. Lifecycle scripts, git dependencies and remote tarballs are now opt-in, node-gyp builds are blocked, and the failure shows up in CI first. Here is the migration.
Manu Shukla -
Microsoft's record 570-flaw Patch Tuesday: the July 2026 triage plan
Microsoft's July 2026 Patch Tuesday fixed a record 570 flaws, including two zero-days already under attack. AI-assisted discovery is why the number exploded, and why the old triage signals stopped working.
Manu Shukla -
pgvector or a dedicated vector database? A RAG decision guide for 1M to 100M vectors
Most pgvector-versus-vector-database comparisons quote one vendor benchmark from April 2025 that ran no filtered queries and tested an extension most teams do not install. Here is what the primary sources actually
Manu Shukla -
Custom web application development in India in 2026: ₹5 lakh to ₹30 lakh, and when to build
Custom web applications in India run ₹5 lakh to ₹30 lakh in 2026, at engineering rates of $15 to $35 per hour against $100 to $200 in the US. But cost is the wrong first question. Three testable signals decide whether
Manu Shukla -
React Native's talent pool is 10x Flutter's: the 2026 cross-platform decision for CTOs
The React Native talent pool runs roughly 10 to 15 times larger than Flutter's, and a senior US hire takes 4 to 8 weeks against 8 to 16 for Flutter. Performance is no longer the deciding variable: both frameworks clear
Manu Shukla -
Meta shipped Muse Spark 1.1 in 2026: what dev teams should know
Meta shipped Muse Spark 1.1 on July 9, 2026, a 1M-token agentic model priced at a quarter of rival rates. It leads on tool use but trails on raw coding. What that means for how dev teams route work.
Manu Shukla -
Flutter comes to LG webOS TVs in 2026: a cross-platform developer's guide
Flutter now targets LG webOS TVs, with a public SDK expected in the first half of 2026 and LG rewriting its own apps in Flutter. Here is what the big screen adds for cross-platform teams, and when a TV build is worth it.
Manu Shukla -
Angular v21: zoneless by default, Signal Forms, and an AI MCP server (2026)
Angular v21 ships zoneless change detection by default, experimental Signal Forms, Vitest as the default test runner, and a built-in MCP server for AI coding. A developer's guide to the features and a safe upgrade
Manu Shukla -
Bun vs Node.js in 2026: which backend runtime should your team choose?
Bun 1.3 installs packages 25 times faster than npm and boots in milliseconds, but Node.js wins on ecosystem depth and support. A practical 2026 comparison, with real benchmarks and a clear verdict on when to use each.
Manu Shukla -
Node.js runs TypeScript natively in 2026: drop ts-node and your build step
Node.js now strips TypeScript types and runs the JavaScript underneath, so ts-node and a build step are optional. What works, what breaks, and why you still need tsc for type checking in 2026.
Manu Shukla -
Next.js 16.3 and TypeScript 7.0: what the Rust and Go toolchain shift means for web teams in 2026
Next.js 16.3 cut Turbopack dev memory up to 90% and TypeScript 7.0 went GA on July 8, 2026 with a Go compiler that type-checks up to 11.9x faster. What the Rust and Go toolchain shift means for web teams.
Manu Shukla -
AI-assisted cyberattacks in 2026: why 84% abuse the tools you already run
Unit 42 found AI accelerated attacks 4x in 2026, with the fastest intrusions reaching data in 72 minutes and identity behind nearly 90% of breaches. Here is what changed and how CTOs and security leaders should respond.
Manu Shukla -
4 engineering lessons from shipping against the iOS 27 beta
The iOS 27 beta is not a routine recompile. UIScene is now mandatory, Liquid Glass is forced on every app, and beta 1 is full of OS bugs. Four field-tested engineering lessons for teams shipping on Apple platforms
Manu Shukla -
5 lessons from shipping enterprise AI agents in 2026
Over 40% of agentic AI projects will be canceled by the end of 2027, per Gartner. These are the five lessons eCorpIT learned shipping enterprise AI agents that actually reach production, priced in 2026 dollars
Manu Shukla -
5 AI Delivery Lessons From Production Enterprise Builds in 2026
Most enterprise AI never reaches production, and much that does shows no measurable return. Five delivery lessons tied to what breaks between a working demo and a system real users trust in 2026.
Manu Shukla -
5 engineering lessons from shipping AI delivery at eCorpIT (2026)
Five engineering lessons from shipping AI delivery: treat the model as swappable, start with evals not vibes, budget tokens and latency, ground outputs with retrieval, and build security in from day one.
Manu Shukla -
5 engineering lessons from shipping AI delivery work in 2026
The launch of eCorpIT Insights: five engineering lessons from shipping AI delivery work, covering amplification, evals as infrastructure, human review, token economics, and delivery stability.
Manu Shukla -
5 engineering lessons from shipping AI features against iOS 27 betas
Five engineering field notes from building AI features against the iOS 27 betas: the 4,096-token on-device context window, the device split, the Evaluations framework, native tools, and a moving beta target.
Manu Shukla -
7 engineering lessons for shipping production AI in 2026
MIT's 2025 research found 95% of generative AI pilots deliver no measurable return despite $30-40 billion in spend. These seven engineering lessons, drawn from eCorpIT's delivery work, separate the AI projects that
Manu Shukla -
5 hard-won lessons from shipping production AI agents in 2026
Most enterprise AI agents never reach production, and quality kills a third that do. Five hard-won lessons from shipping production AI agents: scope, harness, observability, guardrails and human oversight.
Manu Shukla -
3 engineering lessons from shipping enterprise AI agents in 2026
Gartner expects over 40% of agentic AI projects to be canceled by 2027, and production agents succeed about 56.6% of the time. Three engineering lessons from shipping enterprise AI agents in 2026.
Manu Shukla -
8 quick-commerce tech decisions for D2C brands in 2026 (ONDC-ready)
Indian D2C brands now sell across their own site, marketplaces, quick commerce, and ONDC at once. Here are eight tech decisions that make an ONDC-ready stack work and stay profitable in 2026.
Manu Shukla -
5 application modernization patterns that cut delivery risk in 2026
Most modernization fails on delivery risk, not technology. Here are five patterns that cut that risk in 2026, framed as a platform engineering playbook, from strangler fig to DORA-metric guardrails.
Manu Shukla -
Privacy-first AI architecture: 6 lessons from Apple's 2026 stack
Apple rebuilt its AI stack around privacy in 2026. Here are six lessons founders and engineering leaders can take from its hybrid architecture when building privacy-conscious AI systems.
Manu Shukla -
Application Modernization: Monolith to Microservices in 2026
Application modernization monolith to microservices in 2026 — strangler fig pattern, costs, ROI timelines, failures to avoid, India + global guide.
Manu Shukla