Spring Boot Migration and the CRA: When Good Enough Isn’t
Table of Contents If You're Already on 4.0The zombie problem followed youIf You're Still on 3.5The technical risk is growing. The legal risk is about to change.What "Without Undue Delay" Actually Means NowArticle 14 and the 24-hour clockThe calculation changes ...
-
Tiberius: A Security Testing Framework for LLM Applications in Java
Table of Contents The ProblemWhat Tiberius Does1. Fixture-Based Regression Testing2. Guardrail Validation Against Real Attack Data3. Probabilistic Security ContractsAttack Coverage4. Bias Testing5. Model FingerprintingIntegrationThe Case for Shared Attack DatasetsSecurity Testing as a First-Class Engineering ConcernGetting StartedAcknowledgementsReferences Tiberius: A Security Testing …
-
NFC, Crypto, Biometrics, And A New Build Cloud
Device APIs move into the framework core, revolutionary Bluetooth debugging, and the Build Cloud’s new UI is live in preview.
-
BoxLang AI 3.2.0 — Image Generation, Web Search, Fluent Audio, Agent Registry & MCP Observability
BoxLang AI 3.2.0 is here, and it’s a landmark release. We’re shipping five major features: image generation, web search, a fluent audio builder API, a centralized agent registry, and deep MCP observability along with a suite of analytics improvements and …
-
Why Enterprise Java Teams Need Quality Gates Even More in the Age of AI
Table of Contents Enterprise quality is a scaling problemLocal differences become delivery problemsNoisy diffs hurt review qualityIDE-based quality control is not enoughAI needs deterministic boundariesWhat enterprise quality gates should checkFormatting is only one source-code gateJava member ordering is harder than …
-
Exploring MongoT (Atlas Search)
Table of Contents Let’s dive in!Simple Example – Text SearchBreakdown Table (for a ~9ms $search aggregation path through MongoT)Local DebuggingSample DataInteresting Example – Faceted Text SearchLucene Indexing Strategy + Benefits over MongoD IndexesVector Search ExampleLocal Grafana MonitoringPerformance Java Code PackagesSo what …
-
Intro to the BoxLang Formatter
Table of Contents Recommended Team Workflow You know the drill. Someone opens a PR and half the review comments are about tabs vs spaces, where braces go, or why that one function has its arguments formatted differently from everything else. …
-
Why I Banned ThreadLocal from the Exeris Kernel (And What Replaced It)
Table of Contents The Forensic Analysis: The 3 Sins of ThreadLocal1. The Spaghetti State (Unconstrained Mutability)2. The Memory Leak Trap (Unbounded Lifetime)3. The Inheritance Tax (The RAM Killer)The Missing Link: Structured Concurrency IncompatibilityExhibit A: The Zero-Waste Solution (JEP 506)The ScoreboardExhibit …
-
Skills, Java 17, And Theme Accents with Codename One
Java 17 is the new Initializr default, generated projects ship an AGENTS.md authoring skill that any AI agent can pick up (including a workflow that lets agents drive jdb against the simulator), native themes get a runtime accent palette, plus Metal follow-ups and iOS push that no longer prompts at launch.
-
Introducing bx-jwt: Enterprise-Grade JSON Web Tokens for BoxLang
Table of Contents The Fluent Builder — jwtNew()The BIF FunctionsHMAC Sign and VerifyRSA Sign and VerifyJWE Encryptionalg:none RejectionHMAC Minimum Key Lengths (RFC 7518 §3.2)Algorithm AllowlistClock Skew ToleranceAuthentication MiddlewareToken Refresh with Grace PeriodKid-Based Key RotationSigning (JWS)Encryption (JWE) JWT authentication is everywhere. …
-
Metal and Skins
A new Metal rendering backend for iOS, a browser-hosted Skin Designer that retires the skin downloader, an iOS Reminders-style Return-as-Done flag, status-bar tap diagnostics, a simulator dark/light toggle, and a candid look at how we balance quality with the speed of a small open source company.