Tag: security

  • Monorepos in Small Teams

    Monorepos in Small Teams

    Feature flags are debt with an expiration date you must actually enforce. The best architecture diagram is the one the new hire can redraw from memory. If the error message does not say what to do next, it is half an error message. Going further We wrote the migration twice: once to learn, once to…

  • What I Learned About Caching the Hard Way

    What I Learned About Caching the Hard Way

    We measured first, and the bottleneck was not where anyone expected. The fastest query is the one you never send, but the second fastest has a good index. Logs answer questions you knew to ask; traces answer the ones you did not. Going further Caches are easy to add and surprisingly hard to remove. Tests…

  • Observability in Small Teams

    Observability in Small Teams

    The best architecture diagram is the one the new hire can redraw from memory. The rollback plan should exist before the rollout plan is approved. Naming things well saved us more time than any framework migration. The short version A boring deploy pipeline is a feature, not a lack of ambition. Naming things well saved…

  • Type Systems: Mistakes I Keep Seeing

    Type Systems: Mistakes I Keep Seeing

    Caches are easy to add and surprisingly hard to remove. Every retry needs a budget, otherwise it is just a slower outage. We measured first, and the bottleneck was not where anyone expected. What worked Naming things well saved us more time than any framework migration. The fastest query is the one you never send,…

  • Why Background Jobs Matter More Than You Think

    Why Background Jobs Matter More Than You Think

    We measured first, and the bottleneck was not where anyone expected. Tests are documentation that fails loudly when it goes stale. Naming things well saved us more time than any framework migration. Getting started Every retry needs a budget, otherwise it is just a slower outage. Tests are documentation that fails loudly when it goes…

  • Monorepos Without the Hype

    Monorepos Without the Hype

    Caches are easy to add and surprisingly hard to remove. The best architecture diagram is the one the new hire can redraw from memory. The fastest query is the one you never send, but the second fastest has a good index. Context Logs answer questions you knew to ask; traces answer the ones you did…

  • Rate Limiting: Mistakes I Keep Seeing

    Rate Limiting: Mistakes I Keep Seeing

    A boring deploy pipeline is a feature, not a lack of ambition. Every retry needs a budget, otherwise it is just a slower outage. The rollback plan should exist before the rollout plan is approved. Details A boring deploy pipeline is a feature, not a lack of ambition. Feature flags are debt with an expiration…

  • What I Learned About Observability the Hard Way

    What I Learned About Observability the Hard Way

    The rollback plan should exist before the rollout plan is approved. We measured first, and the bottleneck was not where anyone expected. Latency percentiles tell a story that averages politely hide. Getting started Our on-call rotation improved the day we deleted half of the alerts. The rollback plan should exist before the rollout plan is…

  • Load Testing: Mistakes I Keep Seeing

    Load Testing: Mistakes I Keep Seeing

    The rollback plan should exist before the rollout plan is approved. Feature flags are debt with an expiration date you must actually enforce. The best architecture diagram is the one the new hire can redraw from memory. Going further Latency percentiles tell a story that averages politely hide. Most production incidents start as a small…

  • Feature Flags Without the Hype

    Feature Flags Without the Hype

    Logs answer questions you knew to ask; traces answer the ones you did not. Security is mostly about saying no to defaults that were convenient in 2010. The best architecture diagram is the one the new hire can redraw from memory. Lessons A boring deploy pipeline is a feature, not a lack of ambition. If…

  • Rate Limiting Without the Hype

    Rate Limiting Without the Hype

    Small pull requests get real reviews, large ones get approvals. If the error message does not say what to do next, it is half an error message. Our on-call rotation improved the day we deleted half of the alerts. What didn’t Most production incidents start as a small assumption nobody wrote down. Latency percentiles tell…

  • Ten Notes on Monorepos

    Ten Notes on Monorepos

    Small pull requests get real reviews, large ones get approvals. A boring deploy pipeline is a feature, not a lack of ambition. Naming things well saved us more time than any framework migration. What worked Feature flags are debt with an expiration date you must actually enforce. Tests are documentation that fails loudly when it…