Opinion
The Model Should Not Write the Tests for the Code It Wrote
Asking a model to test its own output produces tests that confirm the implementation rather than the intent, and the confirmation is invisible in a green…
Rohit Bhadani
I write about why software breaks and how people figure it out. Founder of Krova Cloud, building isolated microVMs on our own hypervisor. Years of Shopify theme work and shared hosting before that. If I have not reproduced it, I do not publish it.
Bug Hunt
The Model-Written Regex That Took Nine Minutes on One Input
The generated pattern passed every test in the suite, then a single long string made it run for nine minutes. The pattern was not wrong.
Error Autopsy
The Package the Model Invented That Someone Else Registered
The model suggested a dependency that did not exist, the install command ran anyway, and the name resolved because a stranger had registered it.
Ecommerce
The Draft Order That Committed Inventory It Never Paid For
A draft order reserves inventory the moment it is created, and the reservation outlives the draft, so abandoned drafts held stock for days, and the…
Security
The API Key in the Query String That Lived in Every Log
A key passed as a query parameter is copied into access logs, proxy logs, referrer headers and browser history, and rotation does not unlog it.
Performance
The Re Render Cascade From a Context That Changes Every Tick
A context value rebuilt on every render made every consumer re render on every tick, and the consumers included the provider's own parent, so the cascade…
DevOps
The Secret Scanner That Ran After the Push
The check that detects the leaked credential ran in CI, which runs after the push, which is after the credential is cloned by every mirror, fork and CI runner.
Tooling
pg_stat_statements Is the Query Ledger You Never Opened
The extension records every query's call count, total time and rows, normalised by shape, and the slow query you chase for a week is one aggregation away…
Code Review
Reviewing a Terraform Diff for the Resource It Will Replace
A one character change to an immutable attribute shows as a tidy edit in the diff and executes as a destroy plus create, and the review that prices the edit…
Opinion
The Pull Request Description Is the Specification
The diff shows what changed and the tests show what was checked, but the description is the only place the intent lives.
Deep Dive
How the Libuv Threadpool Starves Your DNS Lookups
Node's DNS and file system work share a threadpool of four threads by default, and one slow file read queues every lookup behind it, so the event loop is…
Bug Hunt
The Timezone-Naive Datetime That Sorted Backwards
The report listed tomorrow's events before today's, and the comparison never raised an error, only returned the wrong order, because aware and naive…