Engineering
A green CI run is not a deploy
A green check on a pipeline means every step that ran, succeeded. It does not mean the steps you cared about ran at all.
Engineering
Engineering
Render your blog into the site at build time
A marketing site and a blog usually live in different systems, and the join between them is where things quietly rot. The common answer is to fetch posts in the browser. We think that is the wrong…
Engineering
Scope the role, not just the trust policy
Long-lived credentials in a pipeline are a liability that grows quietly. The rotation nobody owns, the key that appears in a log, the contractor who left with a copy. OIDC removes the class of…
Engineering
Native wheels do not travel
Wheels with native extensions are compiled for a specific operating system and processor architecture. Install them on the machine you are sitting at, ship them to a Linux runtime, and the failure…
Engineering
A generator that edits in place can delete in place
A script that writes generated content into an existing file can also delete parts of it, and the deletion will not look like an error. It will look like a successful run.