OAuth for CLIs and SPAs in 2026: PKCE, Loopback Redirects, and the RFC 9700 Checklist
If you shipped a CLI tool or a single-page app in the last few years, you have probably implemented “OAuth”
From Our Blog
Inside the Event Loop: epoll, kqueue, and io_uring — Why Your Runtime Still Uses Readiness Notifications
Every high-concurrency server you have ever deployed eventually bottoms out at the same place: a call that says “tell me
Eventual Consistency in Practice: Session Guarantees, Read-Your-Writes, and Bounded Staleness
Replica lag is one of those distributed-systems facts everyone accepts in the abstract and nobody plans for in the code.
Structured Logging in Go: A Practical slog Field Guide
Every codebase has a logging moment of reckoning. It arrives when someone has to debug a production incident at 2
Continue readingStructured Logging in Go: A Practical slog Field Guide
Secrets Management Beyond .env Files: Vault, External Secrets, and CI Hygiene
Every codebase that touches a database, an S3 bucket, or a third-party API has secrets, and every team eventually learns
Continue readingSecrets Management Beyond .env Files: Vault, External Secrets, and CI Hygiene
Inside the Go Scheduler: G, M, P, Work Stealing, and Why Goroutines Block Cheaply
Every Go program you have ever shipped is a swarm of goroutines multiplexed onto a handful of operating system threads.
Continue readingInside the Go Scheduler: G, M, P, Work Stealing, and Why Goroutines Block Cheaply
Burn-Rate Alerting on SLOs: Multiwindow Alerts in Prometheus That Don’t Flap
Most teams don’t have an alerting problem; they have an alerting volume problem. The on-call rotation drowns in alerts that
Continue readingBurn-Rate Alerting on SLOs: Multiwindow Alerts in Prometheus That Don’t Flap
Temperature, Top-p, Top-k, and Min-p: How the LLM Sampler Actually Works
Every LLM application has two knobs that get blamed for everything: temperature and top-p. When outputs are boring, someone raises
Continue readingTemperature, Top-p, Top-k, and Min-p: How the LLM Sampler Actually Works
SSRF Defense in Depth: Validation, Egress Controls, and the Metadata Service Lesson
The SSRF advisory lands the way they always do: a feature that fetches a URL — webhook delivery, PDF preview,
Continue readingSSRF Defense in Depth: Validation, Egress Controls, and the Metadata Service Lesson
Go vs Rust vs Free-Threaded Python: Memory Models Compared
Every concurrent program rests on a promise most developers have never read: the language’s memory model. It is the contract
Continue readingGo vs Rust vs Free-Threaded Python: Memory Models Compared