<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Engineering on Ampretia:Dev</title><link>https://ampretia.co.uk/tags/engineering/</link><description>Recent content in Engineering on Ampretia:Dev</description><generator>Hugo</generator><language>en-gb</language><lastBuildDate>Tue, 06 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://ampretia.co.uk/tags/engineering/index.xml" rel="self" type="application/rss+xml"/><item><title>SmallRye Config without the container</title><link>https://ampretia.co.uk/post/smallrye-config-standalone/</link><pubDate>Tue, 06 Oct 2026 00:00:00 +0000</pubDate><guid>https://ampretia.co.uk/post/smallrye-config-standalone/</guid><description>SmallRye Config works outside Quarkus and MicroProfile. Here is a standalone example that wires CLI args, env vars, YAML files, and type-safe mappings together in a plain Java main().</description></item><item><title>When All You've Got Is a Pozidriv, Everything Looks Like a Pozidriv Screw</title><link>https://ampretia.co.uk/post/pozidriv-screwdriver/</link><pubDate>Thu, 01 Oct 2026 00:00:00 +0000</pubDate><guid>https://ampretia.co.uk/post/pozidriv-screwdriver/</guid><description>A take on the old hammer-and-nail aphorism — and what a screwdriver tells us about tool selection, local maxima, and the difference between good enough and optimal.</description></item><item><title>We're Going on a CVE Hunt</title><link>https://ampretia.co.uk/post/2026-08-14-cve-hunt/</link><pubDate>Fri, 14 Aug 2026 00:00:00 +0000</pubDate><guid>https://ampretia.co.uk/post/2026-08-14-cve-hunt/</guid><description>&lt;p&gt;Two scanners. One said nothing. One said there was a problem.&lt;/p&gt;
&lt;p&gt;That&amp;rsquo;s where this started — and that gap is exactly the kind of thing that should make you curious rather than relieved.&lt;/p&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;h2 id="the-setup"&gt;The Setup&lt;/h2&gt;
&lt;p&gt;The container registry scanner — the main one, the one whose output the team relied on — flagged nothing. All clear. The secondary scanner, run as part of a broader policy check, flagged a mid-severity CVE from 2024. Old finding, mid-level severity, and the primary scanner wasn&amp;rsquo;t concerned. The natural read: false positive, secondary scanner being noisy, move on.&lt;/p&gt;</description></item><item><title>The Friction Feature</title><link>https://ampretia.co.uk/post/the-friction-feature/</link><pubDate>Wed, 08 Jul 2026 00:00:00 +0000</pubDate><guid>https://ampretia.co.uk/post/the-friction-feature/</guid><description>Why the inbuilt tax of traditional software development wasn&amp;rsquo;t a bug — and what happens when AI removes it entirely.</description></item></channel></rss>