Delivery pipelines, infrastructure and operations.
21 items
GitHub, npm and Open VSX all skip 2.1.313, yet Cursor says a malicious build with that number was served for 11 hours. What the reports agree on, where they conflict, and a read-only check of one PC.
Node, .NET, curl and others each carry their own Brotli decoder. I counted the places on one Windows PC and tested which clients decode Brotli they never asked for.
I unpacked Python images layer by layer and rebuilt them with common Dockerfile habits. A later rm saved nothing on the wire, and half of pandas in the image was its own test suite.
I simulated Google SRE Workbook burn-rate paging rules on a 99.9% SLO. They bound the budget lost before a page, but below about 900 requests a day they page for nearly every error.
Anthropic replaced git for its monorepo. I measured what shallow, partial and sparse checkouts do to a 343,502-commit repository, and where stock git still runs out.
A popular note says tiny Git commits cost kilobytes and big ones about 10% of the file. I repeated the tests: the kilobytes are filesystem blocks, and the 10% is only the first copy.
Git is replacing SHA-1 with SHA-256 for every commit and file it tracks. A GitHub co-founder argues the attacks motivating the switch do not threaten how Git actually works.
Netlify replaced the lightweight sandbox running its edge functions with full virtual machines, and median latency dropped from about 30ms to 5 to 6ms.
Ten processes update the same git ref at once. Git returns success for all ten, and by default it hides which nine of them never actually stuck.
DeepSeek's DSec runs 380,000 concurrent AI-agent sandboxes a day. Not by caching one big image, but by admitting most of a sandbox can never be reused, and building around that instead.
Docker Sandboxes isolates AI agents in microVMs, not containers. Two bugs patched in the same release both broke it at the one place the guest is allowed to talk back to the host.
Container isolation for a fleet of agents costs 48 seconds once and 4.1 kB per agent after — until the bind mount that makes it convenient costs 465 MB each and hands the sharing back.
An ADE gives every agent its own git worktree. Here that isolates 44 files and leaves 23,199 shared — and the usual fix is a symlink, which is the opposite of isolation.
Prometheus reports fractional counts for counters that only ever increment by one. The reason is a specific extrapolation rule, and knowing it tells you exactly when the number can be trusted.
Cardinality does not creep up on you — it multiplies. Here is the arithmetic behind an exploding metrics bill, the four places the multiplication hides, and what actually shrinks it.
A beginner-friendly SRE guide to service level indicators, objectives and agreements, with a comparison table, the downtime each "nine" allows, and a real cloud SLA read line by line.
How to clone a huge repository without downloading all of it, step by step, with the measured cost of every command and the history commands that quietly download more than a full clone.
How gRPC decides which backend gets each call, why a TCP-level load balancer leaves servers idle, and four ways to fix it. Every distribution number comes from a local experiment you can rerun.
How to create a SHA-256 Git repository, move an existing SHA-1 history into one with fast-export, and the exact errors you hit when the two formats meet. Every command was run on Git 2.55.
What observability actually means, how metrics, logs and traces each answer different questions, how a trace is built, where OpenTelemetry fits, and how SLOs turn signals into alerts.
Tailscale, Gitea, Hermes Agent and Orca headless, wired into one home server on a single mini PC: a private network, a git remote, and two complementary AI coding agents as systemd services.