Featured
The subscription that went deaf
Our Salesforce event subscription stopped delivering after a few days of uptime, with no errors and a green health check. The bug was in the transport, and the lesson was about what "healthy" means.
№ 03 / Notes
Trade-offs
Working notes on architecture, AWS and AI — what each decision cost and whether I'd make it again.
All notes
Flipping the auth provider without logging everyone out
Changing identity providers is a one-way door if you get the order wrong. A checklist for cutting over with a live fallback and a real rollback.
Don't let the model decide the checkout
In a chat-led app, some actions have to appear at the right moment every single time. That's not a job for tool calls. Here's the pattern we used instead.
El deploy "exitoso" que no estaba en producción
Un pipeline en verde no significa que tu código está sirviendo. Cómo verificar de verdad que un cambio llegó a producción.
La redacción de logs no es un checkbox
Un patrón de redacción como *.campo no siempre cubre lo que creés. Cómo mantener datos sensibles fuera de los logs en serio, y no solo en apariencia.
Every string from the outside needs a maximum length
An unbounded string field on an unauthenticated endpoint is a bug. But the fix has a failure mode that can reject perfectly valid requests.
Decisiones con fecha: por qué escribo ADRs aunque seamos dos
Un Architecture Decision Record no es burocracia. Es la única forma que conozco de que un sistema siga explicándose a sí mismo cuando ya nadie recuerda por qué se hizo así.
Fail soft by default: integrating an LLM with systems that can go down
An AI feature is only as reliable as its least reliable dependency. Here's how I make LLM integrations degrade quietly instead of taking the request down.
The sidecar I didn't build
The RFC said ClamAV in a container. The research said GuardDuty. Here's what changed, what it cost, and the parts of a HIPAA upload pipeline nobody puts on the diagram.
Cache-Control will not save you from a bandwidth bill
A marketing site went from 32 GB to 32 TB of video traffic in nineteen days. The headers we added did nothing, and understanding why is the whole lesson.