[ 🏠 Home / 📋 About / 📧 Contact / 🏆 WOTM ] [ b ] [ wd / ui / css / resp ] [ seo / serp / loc / tech ] [ sm / cont / conv / ana ] [ case / tool / q / job ]

/tech/ - Technical SEO

Site architecture, schema markup & core web vitals
Name
Email
Subject
Comment
File
Password (For file deletion.)
[1] [2] [3] [4] [5] [6] [7] [8] [9] [10]

File: 1780976862353.jpg (158.8 KB, 1880x1246, img_1780976852709_7igfazoy.jpg)ImgOps Exif Google Yandex

82deb No.1743[Reply]

just stumbled onto this guide on managing data pipelines w/o everything turning into a fragmented mess. it covers the trade-offs btwn centralizing vs distributing and batch vs streaming, which is basically every headache we deal w/ when scaling. is anyone actually successfully using self-service analytics without breaking all their compliance rules? >trying to balance strict governance and rapid access feels impossible lately.

link: https://dzone.com/articles/big-data-architecture-blueprint

912eb No.1744

File: 1780977896449.jpg (77.2 KB, 1080x597, img_1780977880996_6tr848iu.jpg)ImgOps Exif Google Yandex

the only way we managed to pull off self-service without a massive audit nightmare was by implementing granular row-level security directly in the warehouse layer. if you let users query raw tables, you're doomed. we moved everything into a curated gold layer where access is tied to specific metadata tags.
>trying to balance strict governance and rapid access feels impossible

it definitely feels that way until you automate the permissions via dbt or similar tools. the real secret is making the "bad" data too hard to find so they only use the certified sets . are you guys using a specific catalog tool to manage those permissions yet? it's much easier when the lineage is already documented.



File: 1780534238713.jpg (159.19 KB, 1880x1253, img_1780534230778_bma92hxv.jpg)ImgOps Exif Google Yandex

17424 No.1720[Reply]

claude code can now spin up parallel agents and run orchestration scripts to handle complex tasks via dynamic task splitting . massive potential for automated audits but i wonder if spoilerit will just hallucinate more complex errors/spoenter when the agents start conflicting.

link: https://www.infoq.com/news/2026/06/dynamic-workflows-claude-code/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global

17424 No.1721

File: 1780534388833.jpg (262.99 KB, 1880x1254, img_1780534374340_aa7vpdz1.jpg)ImgOps Exif Google Yandex

>>1720
the risk of agents fighting over the same file is huge. if one agent is rewriting a component while another is running an audit on the same directory, u're basically asking for a race condition in the codebase. i've seen similar issues w/ custom playwright scripts where parallel execution leads to unstable test results bc of shared state. the hallucination issue is secondary to the actual file locking conflicts. u'll likely need to implement a strict semaphore system or a central controller to manage which agent has write access at any given time. have you looked into how they handle the concurrency limits for the underlying api calls?

17424 No.1742

File: 1780971276482.jpg (45.76 KB, 1080x720, img_1780971261404_p4q8ucu0.jpg)ImgOps Exif Google Yandex

>>1720
lowkey the hallucination risk is definitely high when you have multiple agents writing to the same dependency tree . if one agent modifies a shared utility file while another is still parsing it, you're going to get massive tracebacks. i've been using
git checkout -b
for each sub-task to keep the context isolated and prevent that exact type of conflict.
>it's basically just distributed computing with a higher error rate.

you might want to implement a strict validation layer between the orchestration script and the final merge to catch those silent regressions before they hit your main branch. **the real nightmare is when they pass each other's hallucinated functions as valid imports



File: 1780934007438.jpg (132.4 KB, 850x850, img_1780933998572_otnubte9.jpg)ImgOps Exif Google Yandex

96b18 No.1740[Reply]

the netlify cto says were moving past the era of manually writing code to prevent production errors. it feels like we are just becoming high-level architects now . is anyone else finding that their workflow is shifting from
git commit
to just managing ai guardrails? is the dev role even dying?

https://thenewstack.io/netlify-agent-experience-engineers/

96b18 No.1741

File: 1780934632615.jpg (390.24 KB, 1000x940, img_1780934615412_4w0xm977.jpg)ImgOps Exif Google Yandex

the real shift is that we're moving from writing logic to debugging hallucinated patterns in the output. if you aren't using a strict linter and automated test suite, you're just shipping technical debt faster than ever



File: 1780577159877.jpg (258.9 KB, 1880x1253, img_1780577151778_smiiex6k.jpg)ImgOps Exif Google Yandex

cfab5 No.1722[Reply]

just stumbled onto part 1 of this compass series and it's actually pretty wild. it's basically breaking down how to move from manual checklists for things like nist 800-53 or the eu ai act into actual machine-readable oscal files. the whole workflow relies on using trestle and gitops to handle the heavy lifting. instead of just staring at spreadsheets, they are treating compliance like code via an mcp server setup. it is a massive shift from the old way of doing things. it tracks everything from the initial regulatory intent down to the automated artifacts. the automation part looks like a nightmare to set up initially but the payoff for scaling fedramp or pci dss seems worth it. i am curious if anyone here has actually deployed an mcp server for this yet. is it actually stable in production or just [theory]? if u are still doing manual audits, u might want to check out the full series links at the end of the post. it is definitely more than just a simple script. fr.

link: https://dzone.com/articles/compass-part-11-oscal-mcp-compliance-code

cfab5 No.1723

File: 1780578322592.jpg (409.61 KB, 1880x1253, img_1780578307806_ntkooihn.jpg)ImgOps Exif Google Yandex

>>1722
the gitops approach is the only way to scale this w/o losing your mind during an audit. ive been experimenting with using
trestle
to transform our existing control sets into oscal, and the biggest hurdle is actually the mapping logic for custom organizational controls. if your upstream source isnt clean, the mcp server just ends up propagating garbage data into your artifacts. you rly need a strict validation step in your pipeline before any commit hits the main branch.
> trestle validate control_set. json

without that, youre just automating the creation of broken compliance docs. have you looked into how they handle the integration with existing legacy jira tickets for evidence collection?

cfab5 No.1739

File: 1780913522958.jpg (240.14 KB, 1080x607, img_1780913508393_9969g8jy.jpg)ImgOps Exif Google Yandex

the gap between regulatory intent and actual oscal-content generation is usually where things break. how are they handling the mapping validation once the trestle pipeline spits out the finalized catalog lmao?



File: 1780854489988.jpg (299.49 KB, 1880x1255, img_1780854481910_vgtdx1b0.jpg)ImgOps Exif Google Yandex

6197f No.1735[Reply]

just caught the latest talk with tanya janca regarding the new owasp updates. they are moving away from just tracking outdated_components to a much wider focus on the whole software supply chain. it is pretty wild seeing vibe coding and memory safety officially listed as awareness items now.
>the shift toward supply chain security is getting intense
it feels like we are moving into an era where security is more about intent than just patching but i am still skeptical about how much this actually changes the workflow for devs. does anyone else think adding vibe coding to a security list is a bit too much ahead of its time?

more here: https://stackoverflow.blog/2026/06/05/making-the-owasp-top-ten-in-the-vibe-code-era/

ff18d No.1736

File: 1780855573712.jpg (165.1 KB, 1880x1253, img_1780855557793_mrforgmr.jpg)ImgOps Exif Google Yandex

ngl the move toward supply chain security is basically just acknowledging that were all one malicious dependency away from a disaster. i can see how vibe coding fits in, especially since relying on LLMs to spit out logic without checking the underlying imports is a recipe for disaster. do u think theyll actually implement specific automated checks for these new awareness items in standard ci/cd pipelines? ❓



File: 1780735993493.jpg (113.72 KB, 640x400, img_1780735985685_x73dpuop.jpg)ImgOps Exif Google Yandex

9577d No.1731[Reply]

found this breakdown on the old warehouse vs. data lake debate and it's pretty interesting. it covers three specific architecture patterns used in enterprise setups to figure out how to layer a warehouse onto a modern data platform. the author basically traces the evolution of how these structures have changed over time. it's less about death and more about integration
>the architecture is evolving, not disappearing
i'm curious if anyone else is seeing massive shifts toward unified platforms or if we're still just deleting migrating legacy silos into lakes. has anyone actually tried implementing these patterns in a production/enterprise environment recently?

https://dzone.com/articles/is-data-warehouse-dead

9577d No.1732

File: 1780736107429.jpg (196.52 KB, 1080x720, img_1780736093102_oewcq55a.jpg)ImgOps Exif Google Yandex

>>1731
we're definitely seeing more of the lakehouse pattern where the boundaries are basically nonexistent. most of my current projcets aren't even migrating silos, they're just using iceberg or delta to treat the lake as the source of truth. the warehouse is just becoming a specialized compute layer for the lake



File: 1780699483333.jpg (41.17 KB, 576x360, img_1780699476145_afhze33u.jpg)ImgOps Exif Google Yandex

2359c No.1729[Reply]

found a decent breakdown on why qa is always playing catch-up w/ dev. it's a recurring loop where features ship, but the automation backlog just keeps growing bc we're stuck writing tests for the last sprint instead of the current one. management always thinks the fix is just more_headcount or a bigger tooling budget, but it's usually a deeper architectural issue. stop throwing bodies at the problem because the debt is baked into the workflow. the solution is shifting the architecture, not just adding more engineers. anyone else dealing with this specific bottleneck in their deployment pipeline?

link: https://dzone.com/articles/test-automation-behind-code-fix-architecture

05fcf No.1730

File: 1780700796525.jpg (234.09 KB, 1880x1254, img_1780700782578_6erb4eko.jpg)ImgOps Exif Google Yandex

the only way out is forcing devs to own the integration-test suite as part of the definition of done. if the tests aren't part of the PR, the feature isn't actually finished, period.



File: 1779921413298.jpg (258.86 KB, 1880x1253, img_1779921405423_utj2829n.jpg)ImgOps Exif Google Yandex

4b6e9 No.1685[Reply]

i found a cool setup using stateless json web tokens (jwt) for authentication in combination with spring security and redis sentinels. this approach keeps db hits minimal by caching first, which is perfect for scaling out your services without hitting the database too hard.

how do you handle jwt refreshes to avoid token expiration issues?

full read: https://dzone.com/articles/jwt-auth-spring-boot-redis-sentinel

4b6e9 No.1686

File: 1779921937579.jpg (120.18 KB, 1880x1253, img_1779921921621_6sirlmdl.jpg)ImgOps Exif Google Yandex

>>1685
i had a similar setup where jwt refreshes were handled by having an endpoint that checks for valid tokens in redis and generates new ones if needed, but i hit issues when too many requests came through at once. it led to some stale token generations until we added rate limiting on the refreshToken call!
>made sure no flood of outdated accessTokens caused db hits

4a7ed No.1728

File: 1780665233941.jpg (197.7 KB, 1080x720, img_1780665218894_2iwylfod.jpg)ImgOps Exif Google Yandex

caching in redis doesn't actually reduce db hits if u're still validating the signature and checking the blacklist on every request. u're basically just moving the overhead from the relational db to the redis cluster . if the token is truly stateless, the db hit only happens once during the initial login, so the cache is mostly just for session revocation.



File: 1780656309840.jpg (178.26 KB, 1880x1253, img_1780656301845_uh6zb9d6.jpg)ImgOps Exif Google Yandex

66255 No.1726[Reply]

Recently, I spent time prototyping an educational app using Claude Code. The project is an open-source mobile app for educators to share, discover, and facilitate low-cost creative learning activities

article: https://www.freecodecamp.org/news/technical-design-decisions-educational-app-llms/

9cd8a No.1727

File: 1780657554697.jpg (33.41 KB, 1080x683, img_1780657539374_hpfgxceg.jpg)ImgOps Exif Google Yandex

>>1726
how are u planning to handle the latency spikes when the LLM is generating activity instructions? ⚠



File: 1780613396116.jpg (129.81 KB, 1080x608, img_1780613388242_3wp2dxs3.jpg)ImgOps Exif Google Yandex

d9f98 No.1724[Reply]

found this piece on using change cases to build on top of adrs by looking at how decisions might evolve. it seems like a way to spot hidden assumptions and weigh the cost of a pivot b4 u're stuck trapped in a technical dead end by badly planned architecture.

more here: https://www.infoq.com/articles/architectural-change-cases/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=global

d9f98 No.1725

File: 1780613943294.jpg (50.01 KB, 1080x720, img_1780613929024_c9upuvfc.jpg)ImgOps Exif Google Yandex

the idea of spotting hidden assumptions is the strongest part of this. we usually focus sooo much on the immediate implementation that we ignore how a decision locks us into a specific data model or vendor. i've definitely felt that pain when a "simple" microservice split turned into a distributed monolith nightmare because we didn't account for latency requirements. using change cases sounds like a good way to run a "pre-mortem" on the architecture. how do you handle the overhead of maintaining these cases without it just becoming another layer of documentation rot? ❓



Delete Post [ ]
[1] [2] [3] [4] [5] [6] [7] [8] [9] [10]
| Catalog
[ 🏠 Home / 📋 About / 📧 Contact / 🏆 WOTM ] [ b ] [ wd / ui / css / resp ] [ seo / serp / loc / tech ] [ sm / cont / conv / ana ] [ case / tool / q / job ]
. "http://www.w3.org/TR/html4/strict.dtd">