# Saravanan Blog

> Engineering Dev Logs on Sovereign AI, compliance-grade cloud, DevOps, platform engineering, AI cloud, and AI-SDLC from Saravanan Gnanaguru.

## Site Purpose

This is an individual thought-leader blog for practitioners building AI-enabled, compliant, reliable software systems. The site is intended for engineering leaders, founders, DevOps/SRE teams, platform engineers, security teams, and regulated-industry product teams.

## Core Pages

- [Home](/): Latest field notes, featured posts, topics, newsletter signup, and advisory call entry points.
- [About](/about): Saravanan Gnanaguru profile, career background, skills, and consulting/advisory links.
- [Topics](/topics): Browse all essays by topic.
- [RSS Feed](/feed.xml): RSS feed for published posts.
- [Sitemap](/sitemap.xml): XML sitemap for indexable pages.

## Topics

- [Sovereign AI](/topics/sovereign-ai): Private GPT, air-gapped LLMs, regulated AI infrastructure, model governance.
- [Compliance & SecOps](/topics/compliance): SOC2/ISO patterns, zero-trust, secrets management, audit-ready IaC.
- [Platform Engineering](/topics/platform-engineering): Internal Developer Platforms, golden paths, supply-chain security, developer enablement.
- [DevOps](/topics/devops): CI/CD, IaC, deployment strategies, SRE, operations, production readiness.
- [Cloud Architecture](/topics/cloud): AWS, Azure, GCP, cost, resilience, networking, reference architectures.
- [AI Cloud](/topics/ai-cloud): Managed AI services, GPU platforms, model runtimes, provider trade-offs.
- [AI Engineering](/topics/ai-engineering): Architecture, roles, local AI, engineering practice for AI-based product development.
- [AI-SDLC](/topics/ai-sdlc): Process-first SDLC automation, governance, review, delivery lifecycle, telemetry.
- [Effective AI Code Development](/topics/effective-ai-code-development): Prompting, context engineering, AI coding workflow, AI-assisted delivery practice.

## Priority Articles

- [Two Years of AI-Assisted Code Development. Here Is What I Learned and Built.](/posts/building-seo-blog-with-lovable)
- [The Anatomy of a Private GPT: Architecting for SOC2 in Banking](/posts/anatomy-of-private-gpt-soc2)
- [How to Do DevOps and SRE the Right Way From Day One](/posts/how-to-do-devops-and-sre-the-right-way-from-day-one)
- [Zero Downtime Is a Reliability Requirement, Not a Last-Minute Task](/posts/zero-downtime-is-a-reliability-requirement)
- [Sovereign AI Data Center: Definition, Architecture, and Compliance Blueprint](/posts/sovereign-ai-data-center-definition)
- [Getting Started with Apple MLX for Local AI and LLM App Development](/posts/getting-started-with-apple-mlx-for-local-ai-and-llm-app-development)
- [NVIDIA AI Cloud Services: DGX Cloud, NIM, and Enterprise AI](/posts/nvidia-ai-cloud-services-dgx-cloud-nim-enterprise-ai)
- [Why Process-First SDLC Matters More in the AI Coding Era](/posts/why-process-first-sdlc-matters-more-in-the-ai-coding-era)

## Article Inventory

- [How to Reduce AI Coding Tool Costs with Better Prompting and Context Engineering](/posts/how-to-reduce-ai-coding-tool-costs-with-better-prompting-and-context-engineering)
- [AI-Based Product Development: Roles Still Matter as AI Accelerates Execution](/posts/ai-based-product-development-roles-still-matter-even-when-ai-accelerates-execution)
- [Kubernetes Complexity Should Be Earned](/posts/kubernetes-complexity-should-be-earned)
- [The Rise of AI-SDLC Review Automation Platforms](/posts/the-rise-of-ai-sdlc-review-automation-platforms)
- [The Hidden Costs of AI: Preventing Token Shock in AWS Bedrock](/posts/token-shock-bedrock)
- [Killing the Bastion Host: Zero-Trust Access for Fintech](/posts/killing-the-bastion-host)
- [How AI Supports Security Remediation Without Replacing Human Judgment](/posts/how-ai-can-help-with-security-remediation-without-replacing-human-security-judgment)
- [How to Do DevOps and SRE the Right Way From Day One](/posts/how-to-do-devops-and-sre-the-right-way-from-day-one)
- [Identity is the New Perimeter: Cognito for Private AI Workloads](/posts/identity-new-perimeter-cognito)
- [DevOps for AI-Built Apps: Fix, Stabilize, and Deploy Your Product](/posts/devops-for-ai-built-apps-fix-stabilize-and-deploy-your-product)
- [Terraform is Your Auditor's Best Friend](/posts/terraform-auditor-evidence)
- [Why DevOps Consulting Still Has Strong Value in the AI Era](/posts/why-devops-consulting-still-has-strong-value-in-the-ai-era)
- [Why AI Product Development Still Needs Architecture Thinking](/posts/why-ai-product-development-still-needs-architecture-thinking)
- [Supply Chain Security in GitHub Actions: Stopping the Next SolarWinds](/posts/supply-chain-github-actions)
- [Deploy on Friday: The ECS Blue/Green Safety Net](/posts/deploy-on-friday-ecs-bluegreen)
- [Cloud Cost-Aware Delivery for Product Teams](/posts/cloud-cost-aware-delivery-for-product-teams)
- [SBOM-Based Security for GitHub Repositories](/posts/sbom-based-security-for-github-repositories)
- [Getting Started with Apple MLX for Local AI and LLM App Development](/posts/getting-started-with-apple-mlx-for-local-ai-and-llm-app-development)
- [Two Years of AI-Assisted Code Development. Here Is What I Learned and Built.](/posts/building-seo-blog-with-lovable)
- [AWS AI Services: Bedrock, SageMaker, and GPU Options](/posts/aws-ai-services-bedrock-sagemaker-gpu-options-explained)
- [AI Code Review Is Not Enough: Why Delivery Guardrails Matter](/posts/ai-code-review-is-not-enough-why-delivery-guardrails-matter)
- [NVIDIA AI Cloud Services: DGX Cloud, NIM, and Enterprise AI](/posts/nvidia-ai-cloud-services-dgx-cloud-nim-enterprise-ai)
- [Sovereign AI on Metal: Air-Gapped LLM Stack with Ubuntu & vLLM](/posts/sovereign-ai-on-metal-vllm)
- [Apple MLX for Apple AI Apps: Development to Deployment](/posts/apple-mlx-for-apple-ai-app-development-and-deployment)
- [DevSecOps for AI-Built Applications](/posts/devsecops-for-ai-built-applications)
- [Logs are Your Forensic Evidence: Structured Security Logging](/posts/structured-security-logging)
- [Sovereign AI Data Center: Definition, Architecture, and Compliance Blueprint](/posts/sovereign-ai-data-center-definition)
- [Zero Downtime Is a Reliability Requirement, Not a Last-Minute Task](/posts/zero-downtime-is-a-reliability-requirement)
- [The $180,000 Kubernetes Mistake](/posts/180k-kubernetes-mistake)
- [From Prompt to Production: The Golden Path for Secure GenAI Apps](/posts/golden-path-secure-genai)
- [DigitalOcean AI and GPU Services for Small AI Teams](/posts/digitalocean-ai-gpu-services-for-small-ai-teams)
- [The Death of .env Files: Automated Secret Rotation with Terraform](/posts/death-of-env-files)
- [Your IDP is Actually a Compliance Engine](/posts/idp-is-a-compliance-engine)
- [The Region Nuke Test: Why IaC is Your Ransomware Policy](/posts/region-nuke-iac-dr)
- [Azure AI Services: OpenAI, Foundry, and GPU Trade-Offs](/posts/azure-ai-services-architecture-openai-foundry-gpu-trade-offs)
- [From Idea to Production: Practical SDLC for AI-Based Product Development](/posts/from-idea-to-production-a-practical-sdlc-framework-for-ai-based-product-development)
- [From Jira to Deployment: How AI Can Support the Complete Delivery Lifecycle](/posts/from-jira-to-deployment-how-ai-can-support-the-complete-delivery-lifecycle)
- [Why Process-First SDLC Matters More in the AI Coding Era](/posts/why-process-first-sdlc-matters-more-in-the-ai-coding-era)
- [NAT Gateways are Leaking Your Data (and Your Budget)](/posts/nat-gateways-leaking)
- [Process-First AI-SDLC: Why Prompts Won't Save Your Team](/posts/process-first-ai-sdlc)
- [Google Cloud AI Services: Vertex AI, Gemini, and Platform Fit](/posts/google-cloud-ai-services-vertex-ai-gemini-ml-platform-choices)
- [The Anatomy of a Private GPT: Architecting for SOC2 in Banking](/posts/anatomy-of-private-gpt-soc2)
- [How to Avoid Context Burnout in AI Coding Workflows](/posts/how-to-avoid-context-burnout-in-ai-coding-workflows)

## Conversion Paths

- Newsletter signup appears on the homepage and post pages.
- Advisory calls route to Topmate.
- Enterprise advisory routes to `gsaravanan.dev`.
- AI Engineering Circle routes to `ai-engineering.in`.