Blog

Notes from the enterprise workbench

A knowledge base on topics we keep running into on projects — architecture, identity, logging, AI agents, regulatory edge cases. No marketing copy, just the material we ourselves would want at hand on day one of a new engagement.

Architecture

Architecture

Domain-driven design

Why good architecture begins with the language of the business. Bounded contexts, tactical building blocks, event storming — and why low-code platforms need DDD concepts more than is usually assumed.

Architecture

Model-driven software development

How models, generators and platforms break the magical triangle of time, cost and quality. Domain engineering, an investment case that breaks even at the third product — and the direct connection to low-code.

Architecture

Event streaming with Apache Kafka

From distributed commit log to streaming platform: topics, partitions, replication, KRaft, producer and consumer APIs, step-by-step setup, and an honest comparison with RabbitMQ — when does which tool fit.

Architecture

Asynchronous messaging with RabbitMQ

The classical message broker — exchange, binding, routing key, queue, ack. A compact five-page introduction with quorum queues, DLX, priority queues, and a clean delineation from Apache Kafka.

Architecture

Keycloak in production

From the WildFly legacy to the Quarkus distribution: cluster topology with Infinispan, external PostgreSQL, themes for login and email, Spring Boot and front-end integration, identity brokering, FAPI, and zero-downtime upgrades.

Architecture

BundID in citizen-facing applications

The full integration path — BMI identifier, Self-Service Portal, certificates, SP metadata upload, AKDB SAML extensions, Spring Security SAML2 configuration. Including all attribute OIDs, the bPK2 pseudonym model, and FIT-Connect-based postbox delivery.

Security

Observability

AI Engineering