Shahvaiz Janjua
Writing

Case studies, frameworks, essays.

Illustration of two query lanes — instant reuse of approved SQL and a human-review path — converging on one database
Guide

Fast-or-Verify: Trustworthy NL-to-SQL with Human-in-the-Loop

Most NL-to-SQL demos are impressive — until you need real guarantees. A two-lane architecture that reuses human-approved SQL instantly and routes novel questions to review.

3 min read
Architecture diagram: a request flows through GCP API Gateway, which validates tokens with Auth0 before forwarding to the backend
Guide

Securing Backend APIs with GCP API Gateway and Auth0

Protecting backend APIs behind GCP API Gateway with Auth0-issued JWTs: OpenAPI securityDefinitions, audiences, and validating tokens at the gateway.

4 min read
Diagram of a browser sending a CORS OPTIONS preflight request through GCP API Gateway to a backend
Guide

CORS in GCP API Gateway: Fixing Preflight OPTIONS Failures

Managed GCP API Gateway fails browser preflight requests with a 503 'No Healthy Upstream' CORS error. The OpenAPI spec change that makes OPTIONS handling work.

4 min read
Stylised illustration of code flowing from a truck into a gear-filled DevOps cloud toward serverless computing
Guide

OCI DevOps CI/CD: Deploying OCI Functions from Commit to Cloud

End-to-end CI/CD on OCI DevOps: code repository, build and deployment pipelines, triggers, and build_spec.yaml — deploying a serverless Function on every commit.

9 min read
End-to-end RAG architecture diagram: data ingestion via chunking, embedding and a vector store, feeding query response with semantic search and Generative AI
Guide

What Is Retrieval-Augmented Generation? RAG to Reality, Part 1

Part 1 of RAG to Reality: the use-cases that demand RAG, how ingestion (chunking, embedding, vector stores) and query flow actually work, and the enhancements that make RAG reliable.

10 min read
Diagram of Certbot on an OCI VM obtaining a Let's Encrypt certificate via the ACME challenge and updating the load balancer certificate
Guide

OCI Load Balancer: Free SSL with Let's Encrypt Auto-Renewal

Free Let's Encrypt certificates on an OCI Load Balancer, auto-renewed with Certbot deploy hooks and the OCI CLI — all infrastructure in Terraform.

10 min read
Hub-and-spoke architecture diagram — On-Premises and Multicloud sites connect over Site-to-Site VPN to a DRG, which links a Hub VCN with a Network Firewall and a Spoke VCN with a Workload VM
Guide

Selective DRG Routing Through OCI Network Firewall (Terraform)

Full Terraform for an OCI hub-and-spoke where some traffic routes through a central Network Firewall and the rest goes direct — with the DRG route-table mechanics explained.

19 min read
Diagram of a browser reaching highoncloud.co.uk through an OCI Network Load Balancer to a VM running NGINX, Ghost and MySQL
Guide

Host a Free Blog on Oracle Cloud (Ampere A1 + Free HTTPS)

Updated walkthrough for a free Ghost blog on Oracle Cloud: Always Free Ampere A1 compute, Network Load Balancer, Bastion access, and free SSL.

9 min read
Architecture diagram of a browser reaching highoncloud.co.uk served by nginx, Ghost and MySQL on one VM
Guide

Creating a Free (HTTPS) Blog on Oracle Cloud

The original 2021 guide to a free HTTPS blog on Oracle Cloud with Ghost, Let's Encrypt and NoIP. A newer version of this walkthrough exists.

5 min read