Writing
Blog
What we are building and why, written the way we would explain it to you in person. One post a week, and every post is also available as raw Markdown for the agents reading along.
Ship an AI-built app in 90 seconds: from git URL to live
A complete walkthrough of the first deploy: what detection reads, what the build actually does, where the ninety seconds go, and what to do when the detection guesses wrong.
ReadThe hard spending limit: why we cap instead of billing you more
Every platform has a budget setting. Almost none of them stop the bill. Here is the mechanical difference, the balance sheet that makes it possible, and the two things that fall outside it.
ReadLet an agent run your infrastructure: MCP, scopes and safety
Giving a model write access to your production platform sounds reckless. It is reckless — unless the blast radius is a number you set. Here is the full safety model, mechanism by mechanism.
ReadConnect Claude Code, Codex or Cursor to cmdz over MCP
The configuration for each client, what the authorisation flow actually does, how to pick a profile, and how to tell whether it is working.
ReadPasswordless from day one: how passkeys work on cmdz
No password, no username, no emailed code, no authenticator app. What that means in practice, what happens when you lose a device, and why we will not add a fallback.
ReadDeploy a Next.js + Postgres app without writing a Dockerfile
The most common stack on this platform, end to end: detection, the database, migrations on release, environment variables, preview environments and what the whole thing costs.
ReadDeploy Laravel on cmdz: Octane, migrations and queues
A real Laravel deployment: the release command, queue workers as their own workload, the scheduler, Octane, storage on object storage, and where the horizontal-scaling surprises are.
ReadDeploy FastAPI with a vector database for RAG
A retrieval-augmented app end to end: FastAPI on Uvicorn, pgvector, where the embedding cost actually lands, and why the spending limit matters more for this shape of app than any other.
ReadChoosing a region: data residency and your own redundancy
What a region actually guarantees, what it does not, and how to run one app in two of them — including the honest limits of what we promise across regions.
ReadBuy a domain and manage DNS in one place
Search, buy, attach and certify in one flow — plus why domains are the one thing charged outside your spending limit, and why we always show the renewal price.
ReadPreview environments per pull request, explained
What gets created, what is shared with production and what is not, how sleeping keeps twenty of them nearly free, and the two mistakes that make previews expensive.
ReadWhat counts toward your limit — and what does not
The complete list, both columns, including the two things outside the ceiling and the reason for each. No "and more", no asterisks.
Readcmdz vs a hyperscaler: cost predictability for AI builders
Three concrete workloads priced against the published rates of Vercel, Railway, Render, Fly and Cloudflare — including the two profiles where they win.
ReadEU data, EU law: what sovereignty actually means for your stack
Beyond the region dropdown: where the control plane lives, where the logs and backups go, who the subprocessors are, and which questions to ask any provider claiming an EU region.
ReadScaling to zero and back: how cold starts work
What actually happens between a request arriving at a sleeping app and it being served, where the milliseconds go, and when scale-to-zero is the wrong choice.
ReadRollbacks in seconds: the 90-day deploy history
Why a rollback here is a cutover rather than a rebuild, what it does and deliberately does not undo, and how to make your migrations rollback-safe.
ReadMetering explained: how usage becomes credits
The full chain from a 15-second sample to a line on your invoice: what we measure, how precise it is, which way the imprecision points, and why rounding happens exactly once.
ReadSecrets and environment variables, done right
Where secrets live, why env pull writes names and never values, what an agent can and cannot see, and how to rotate a credential without a redeploy.
How we isolate customer workloads with Kata micro-VMs
The difference between a namespace and a hypervisor as a security boundary, what it costs in memory and boot time, and why it matters more now that a model wrote the code.
ReadBuilding an app entirely by talking to an agent: an end-to-end walkthrough
A complete session from empty directory to a live app on a custom domain, without touching a dashboard — including the two moments the agent had to come back and ask.
Read