Latest from Muhammad

The Observability Tax: When Monitoring Costs Exceed Downtime Costs
Observability costs can spiral when teams collect more telemetry than they actually use. A more mature approach prioritizes the data that directly improves incident detection, diagnosis and recovery.
Sep 24, 2026 · 3 minAll articles by Muhammad Yawar Malik
Showing 1–16Why Your CI/CD Pipeline Is Your Most Unprotected Attack Surface
CI/CD pipelines often hold privileged credentials, execute third-party code and connect directly to production, making pipeline security one of the most overlooked risks in modern DevOps.
The Trust Problem With AI Agents in Production Pipelines
AI agents boost DevOps pipelines, but confident failures create risk. Here’s how to design for calibrated trust and human oversight.
The Velocity Trap: Why Shipping Faster Is Making Systems Worse
There is a particular flavour of engineering dysfunction that looks, from the outside, like peak performance. Deployments are frequent. Sprint velocity is high. The feature backlog is shrinking. Leadership is pleased. And underneath all of it, the system is quietly rotting. Technical debt compounds with every rushed deployment. Observability gaps widen because nobody has time […]
Agentic CI/CD is Not Automation: Why the Distinction Will Define DevOps in 2026
There is a dangerous conflation happening across our industry right now. Teams are plugging LLM-powered agents into their deployment pipelines, calling it “agentic CI/CD,” and treating it as the next logical step after shell scripts and Terraform modules. It is not. Automation executes predefined instructions. An agent reasons about context, makes decisions, and takes actions […]
VibeCode Meets DevOps: Accelerating Low-Code Innovation
AI-assisted low-code tools like VibeCode speed app development, but DevOps teams must ensure security, quality and CI/CD integration.
Security as Code is Becoming the New Baseline: Continuous Compliance in DevOps
There was a time when compliance meant a quarterly ritual. Someone from security would walk over with a spreadsheet, ask a few questions, tick a few boxes and disappear until the next audit cycle. The infrastructure team would scramble to prove that yes, encryption was enabled, and no, that S3 bucket was not public anymore. Everyone felt relieved, […]
FinOps Meets DevOps: Engineering Cost Ownership in 2026
In 2026, cloud cost overruns stop being finance’s problem and become an engineering responsibility. Here’s how treating cost as code finally makes FinOps work.
Part 3: The Zero-Touch Infrastructure: Architecting Systems That Fix Themselves
Part 3: Discover how autonomous SRE transforms incident management and system reliability, enabling self-healing systems that reduce reliance on human intervention.
Part 2: From Reactive to Predictive: Training LLMs on Your Incident History
Part 2: Discover how to harness incident history and AI to predict and prevent operational issues before they escalate, improving efficiency in Site Reliability Engineering.
Part 1: Death of the Toil: How AI Agents Are Replacing Traditional Runbooks
Part one of a three-part series: Discover how AI-driven reasoning agents are revolutionizing SRE practices by eliminating traditional toil and enhancing incident management.
From Reactive to Predictive: Capacity Planning Systems That Actually Work
I used to think capacity planning was about setting up CloudWatch alarms and hoping they’d fire before things broke. Spoiler: that’s not capacity planning—that’s just reactive firefighting with extra steps. Real capacity planning means knowing you’ll need more database capacity three weeks from now, not three minutes after your site starts timing out. It means […]
SRE in the Age of AI: What Reliability Looks Like When Systems Learn
As AI and ML become core production components, SRE is evolving from managing deterministic systems to ensuring the reliability of dynamic, learning systems. New metrics, workflows, guardrails and cross-disciplinary practices are redefining reliability in the age of adaptive software.
Why Traditional SLOs Are Failing at Hyperscale: Building Context-Aware Reliability Contracts
Discover how context-aware reliability contracts (CARC) redefine SLOs for hyperscale systems—optimizing uptime, reducing infrastructure spend by 33%, and aligning reliability with business value across user tiers, regions, and workloads.
Why Your SLO Dashboard is Lying: Moving Beyond Vanity Metrics in Production
Discover how redefining service level objectives (SLOs) around business impact — not vanity uptime metrics — reduced incidents by 75% and saved $2.3M in lost revenue.
Anatomy of an Outage: Our AWS AutoScaling Group “Helping” Hand Pushed us off the Cliff
An AWS us-east-1 outage exposed how automation can backfire. Learn why autoscaling failed, how pinning ASGs saved uptime, and what to do in future outages.