https://blog.penmen.net/Recent content on Field NotesHugoen-usTue, 07 Jul 2026 00:00:00 +0000https://blog.penmen.net/2026/07/building-a-text-to-sql-agent-that-actually-works-on-enterprise-data/Tue, 07 Jul 2026 00:00:00 +0000https://blog.penmen.net/2026/07/building-a-text-to-sql-agent-that-actually-works-on-enterprise-data/LLMs score 85%+ on public SQL benchmarks but collapse to 39–61% on real enterprise schemas. I built a multi-stage data agent for a life insurance data warehouse to close that gap — here's what 18 months of iteration taught me about why the approach matters more than the model.https://blog.penmen.net/2026/06/codebuild-hosted-github-actions-runners-from-static-egress-to-ghe-data-residency/Tue, 23 Jun 2026 00:00:00 +0000https://blog.penmen.net/2026/06/codebuild-hosted-github-actions-runners-from-static-egress-to-ghe-data-residency/CodeBuild-hosted GitHub Actions runners in private subnets give you controlled, static egress through a NAT Gateway — meeting enterprise allowlisting requirements. This post covers two authentication paths: CodeConnections for github.com repos, and a PAT-based workaround for GitHub Enterprise Cloud with data residency (.ghe.com) where CodeConnections isn't supported.https://blog.penmen.net/coming-soon/Mon, 01 Jan 0001 00:00:00 +0000https://blog.penmen.net/coming-soon/Posts I'm working on or thinking about.