Debugging
I Gave Five Models the Same Bug and Noted Each Mistake
One real production bug, five current models, identical context, and a notebook. None produced the answer outright, each failed in a characteristic way, and…
DevOps
Treat a Prompt Change Like a Deploy, Because It Is One
The prompt was edited in a config string on a Friday and behaviour shifted for every user, with no version, no gate and no rollback.
Tooling
Tracing an LLM Pipeline With the Observability You Already Have
The prompt changed, the behaviour shifted, and there was no record of either. Before buying a tracing product, the pipeline needs the four fields your…
Security
Your Dependency Audit Found Ninety Four Issues and Zero Problems
The audit reported ninety four vulnerable dependencies and the team fixed none, rationally, because none were reachable.
Tooling
hyperfine Will Tell You the Build Got Slower and By How Much
One cold cache run says the build is slow, and the cold cache run is the outlier. Statistical benchmarking with warmup and repeats turns 'it feels slower'…
Error Autopsy
Reading a Go Panic Stack Trace Without Guessing
The top frame of a nil pointer panic is rarely the cause. The goroutine dump tells you which goroutine, which value was nil and which send made it so, if…
Tooling
You Are Recording the DevTools Performance Profile Wrong
A profile recorded with a warm cache, no throttling and a mid session state measures none of the conditions your users meet, and the optimisation built on…
Tooling
Ten bpftrace One Liners That Replace a Week of Guessing
Latency without CPU, stalls without errors, syscalls nobody counted. The kernel already observes all of it, and bpftrace turns the observation into a one…
Code Review
The Pull Request That Logged an Email Address at Debug Level
Debug logging the full request body is one flag flip from production, and the request body is where the email, the token and the card reference live.
Shopify
The App Embed Block That Moved to the Top of Every Page
After a theme update, an app's script ran before the theme's and broke it. App embed blocks live in the theme's JSON, not in the app, so a theme update…
Tooling
openssl s_client Answers Every TLS Question
Chain broken, SNI wrong, protocol refused, certificate expiring. The TLS questions that produce guesswork are all answerable from one command, and the…
Security
Deleting the Commit Did Not Delete the Secret
The credential was removed from the current tree and the team considered it handled. The blob still lives in history, in every clone and in every fork, and…