04

Notes

What we actually change in production — not a newsletter.

Pipeline log · EN/ES
Security

The pentester that never sleeps

ARTEX runs a penetration test the way a small team would: autonomous, with evidence, inside your walls. Which is why we only license it to publicly accountable organizations.

9 Oct 2026 · 15 min
FinOps

Self-host LLM cost: 300 tok/s of DeepSeek-V4.1-Flash

A pair of H100s does not host this model. An 8× H200 node is ~€33,900 a month; the DeepSeek API at 300 tok/s is ~€870. You buy the node because the tokens cannot leave.

17 Sep 2026 · 18 min
FinOps

The 29% of your AWS bill that is waste

Flexera’s 2026 figure is 29% wasted IaaS and PaaS. On an €8,500 bill that is €2,400 a month. Count it, including the lines you should not cut.

17 Sep 2026 · 16 min
How we work

The handover

A handover is a pass/fail drill on production, not a folder of documents. The engagement is designed to end.

27 Aug 2026 · 14 min
Operations

Hire a platform engineer, or outsource it

The loaded first-year cost of a hire in Spain, versus a boutique, and the cases where hiring wins. Do the arithmetic before you post the job.

27 Aug 2026 · 16 min
Security

NIS2 before the law arrives

Article 21 does not wait for the BOE. Detection, identity, signed artifacts, and a report the board can read without a translator.

26 Aug 2026 · 14 min
Operations

Your only DevOps engineer just resigned

The notice period is the last time that knowledge is free. A 30-day triage: freeze, rotate, deploy with somebody else, four runbooks.

26 Aug 2026 · 15 min
CI/CD

One path to production

Before we touch the rest of the system, we leave one real, reproducible path — with rollback in a single command. Every other service copies that pattern.

12 Aug 2026 · 14 min
Observability

Alerts that earn the page

SLOs, error budgets and burn-rate alerting. On-call stops being a tax when every page justifies itself.

5 Aug 2026 · 12 min
AI

Models that stay inside

An AI gateway is not a chat box. It is keys, quotas, traces, and a switch for when the data cannot leave for a vendor.

28 Jul 2026 · 13 min
Infrastructure as code

Terraform without heroes

State splitting, modules that encapsulate decisions, policy over the plan, and credentials that do not outlive the job.

22 Jul 2026 · 13 min
Kubernetes

The cluster you can explain

Requests and limits from data, three scaling loops that ignore each other, probes that do not self-harm, and an attributable bill.

9 Jul 2026 · 14 min
Migration

Migrations that happen on a Tuesday

Real inventory, networking first, verified replication, and a cutover with abort criteria written in the cold. No Saturday war room.

24 Jun 2026 · 13 min