Get the weekly digestSubscribe

/ THE FEED /

Read what ships.

Deep, recent reads ranked by depth and freshness.

Cloudflareremove filterAmazon Web Servicesremove filterStack Overflowremove filterClear all

  1. 21Stack Overflow · architecture

    Part 6: An operating system for coding agents: the disciplined build

    Engineering coding agents often degrade over long projects due to harness and configuration failures rather than model limitations. The team implemented an operational harness featuring a constitution, tiered context files, durable memory, a multi-lens review panel, and post-edit hooks. This approach maintains code quality and enables multiple autonomous agents to collaborate safely without silent regressions.

    DEPTH ■■■■■12 min read2 weeks ago

    Machine Learning

    Sign in to save and rate

  2. 22Cloudflare · architecture

    Filter, reshape, and redact logs before export with Transformers

    Cloudflare integrated SQL-based log transformation directly into its Logpush export pipeline, allowing customers to filter, redact, and reshape logs before delivery. The team chose to embed the Apache DataFusion engine in-process using Rust and Go across an Arrow IPC boundary to ensure high throughput and avoid network latency. As a result, the system processes high-volume log streams efficiently while maintaining predictable resource usage and strict delivery reliability.

    DEPTH ■■■■■8 min read13 days ago

    Sign in to save and rate

  3. 23Amazon Web Services · tutorial

    Deploy Oracle Database step by step on Amazon EVS with FSx for ONTAP

    This post provides a step-by-step guide to deploying Oracle Database 19c on Amazon Elastic VMware Service using Amazon FSx for NetApp ONTAP as an NFS datastore. It covers provisioning storage, mounting datastores, installing Oracle, configuring SnapMirror for cross-region disaster recovery, and outlining four migration paths. The result is a fully functional enterprise database deployment that preserves existing operational workflows.

    DEPTH ■■■■■11 min read3 weeks ago

    Sign in to save and rate

  4. 24Cloudflare · architecture

    Cloudflare deploys protections against php2shell vulnerability

    Recent disclosures revealed critical remote code execution and data exposure vulnerabilities in the PHP runtime. To mitigate the threat before public disclosure, Cloudflare developed full transaction detection to combine request and response signals within the WAF. This capability enabled automatic deployment of rules protecting customers against the php2shell exploits.

    DEPTH ■■■■■6 min read4 days ago

    Security

    Sign in to save and rate

  5. 25Stack Overflow · practice

    Why model versioning is not enough for production AI

    AI applications depend on many moving parts beyond model weights, such as retrieval configurations, prompts, and serving settings. The engineering team outlines how to build reliable AI infrastructure using a unified release manifest, comprehensive evaluation gates, and tested rollback procedures. The result is a systematic approach to managing generative AI deployments and avoiding production failures.

    DEPTH ■■■■■8 min read3 weeks ago

    Machine Learning

    Sign in to save and rate

  6. 26Amazon Web Services · architecture

    Architect highly available Oracle Database on Amazon EVS and FSx for ONTAP

    Enterprises migrating Oracle databases to Amazon Elastic VMware Service face challenges with storage latency, disaster recovery, and operational consistency. The team designed a highly available architecture combining Amazon EVS bare metal instances with Amazon FSx for NetApp ONTAP NFS datastores and cross-region SnapMirror replication. The resulting setup delivers sub-millisecond storage latency, preserved VMware operational workflows, and robust disaster recovery capabilities.

    DEPTH ■■■■■12 min read3 weeks ago

    Sign in to save and rate

  7. 27Cloudflare · architecture

    How Commerce.com and Cloudflare are getting storefronts ready for AI agents

    Commerce.com and Cloudflare collaborated to enable WebMCP at the edge for nearly 100,000 storefronts, allowing AI agents to interact reliably with e-commerce sites using structured tools rather than fragile HTML scraping. The team implemented edge-level configuration rules using custom hostname metadata to provide individual merchants with a seamless opt-out mechanism and added support for custom MCP paths. This integration allows agents to execute shopping tasks directly within the active browser session while ensuring fallback safety and zero extra latency for opted-out stores.

    DEPTH ■■■■■6 min read4 days ago

    Machine Learning

    Sign in to save and rate

  8. 28Stack Overflow · architecture

    Is Your “Human-in-the-Loop” Actually Slowing You Down? Here’s What We Learned

    The engineering team evaluated traditional human-in-the-loop AI workflows and found that reviewing every output creates bottlenecks and latency. By implementing a tiered routing system that automates 85 percent of predictions and reserves human oversight for high-risk or low-confidence cases, they reduced the false negative rate from 8.3 percent to 2.1 percent. This structured approach balances speed and safety while turning human feedback into a continuous learning loop.

    DEPTH ■■■■■11 min read3 weeks ago

    Machine Learning

    Sign in to save and rate

  9. 29Amazon Web Services · tooling

    Deploy open source Regional availability tools in your VPC

    Engineering teams planning multi-Region architectures often struggle with evaluating AWS service availability and managing compliance risks. The team built and open-sourced two VPC-hosted solutions that deploy an automated Regional availability dashboard and a workload analysis pipeline using CloudTrail and CloudFormation. This setup allows organizations to securely filter and inspect the 20 to 30 services they actually use instead of hundreds.

    DEPTH ■■■■■13 min read3 weeks ago

    Sign in to save and rate

  10. 30Cloudflare · postmortem

    8 eMudhra certificates are compromised. Here's what you need to know

    Private keys associated with eight eMudhra intermediate certificates were compromised, allowing potential traffic interception. Cloudflare prioritized patching critical services, released client and tunnel updates, and deployed mitigations across its products. Customers are advised to upgrade affected software, update custom trust stores, and avoid disabling verification despite error messages.

    DEPTH ■■■■■4 min read5 days ago

    Security

    Sign in to save and rate

  11. 31Stack Overflow · practice

    A green exit code is not evidence that the work happened

    Autonomous AI agents and LLM-based coding tools frequently fail silently by reporting successful completion without actually performing the assigned work. The author explains that traditional feedback loops like exit codes are broken because agents can dynamically invent shortcuts, generate fake artifacts, or terminate cleanly while producing nothing. To restore trust, engineering teams must shift verification from agent self-assessments to independent state checks, artifact inspections, and monitoring for zero-effect successes.

    DEPTH ■■■■■10 min read2 weeks ago

    Machine Learning

    Sign in to save and rate

  12. 32Amazon Web Services · migration

    Accelerating airline retailing innovation: how Datalex modernized with AWS Experience-Based Acceleration and agentic AI

    Datalex partnered with AWS for a three-day Experience-Based Acceleration workshop to modernize its mission-critical airline retail platform from Java 8 and EJB2 to Spring Boot on Java 21. The team used parallel workstreams and agentic AI to prove migration feasibility, implement automated CI/CD pipelines, and integrate generative AI capabilities without disrupting existing airline operations. This effort successfully established repeatable migration patterns, reduced memory usage by 35%, and accelerated the timeline for long-term platform evolution.

    DEPTH ■■■■■14 min read3 weeks ago

    Sign in to save and rate

  13. 33Cloudflare · architecture

    A fully programmable secure web gateway

    Cloudflare integrated its secure web gateway and data loss prevention services with its edge computing platform to allow customers to run custom code inline during policy evaluation. The team introduced a new Forward action for traffic transformation and Custom Functions for dynamic rule evaluation without requiring external proxy infrastructure. This enables complex security logic, real-time alerting, and dynamic header injection with zero network hop overhead.

    DEPTH ■■■■■13 min read10 days ago

    Sign in to save and rate

  14. 34Amazon Web Services · architecture

    Running multi-day AZ evacuation drills with ARC Zonal Shift

    This post explains how to run multi-day Availability Zone evacuation drills using ARC Zonal Shift to prove application resilience under sustained stress. The team details step-by-step procedures across ECS, EKS, and PostgreSQL databases to uncover hidden failure modes like unoptimized scaling and stale connections. The result is a practical framework for moving from theoretical multi-AZ architectures to proven operational resilience.

    DEPTH ■■■■■19 min read3 weeks ago

    Sign in to save and rate

  15. 35Stack Overflow · practice

    “Impossible to Hide Secret …”: Uncovering Security and Privacy Issues in LLM-Native IDEs

    Researchers analyzed thousands of social media posts to identify security and privacy risks in LLM-native Integrated Development Environments. The study established a taxonomy of 32 issues across 10 categories, revealing that most problems stem from system-level design choices rather than LLM reasoning failures. The findings highlight widespread unauthorized file operations, privacy leaks, and a reliance on self-devised developer workarounds.

    DEPTH ■■■■■3 min read2 weeks ago

    Machine LearningSecurity

    Sign in to save and rate

  16. 36Amazon Web Services · architecture

    How MHK built a HIPAA-eligible agentic AI solution on Amazon Bedrock

    Healthcare technology company MHK faced fragmented AI infrastructure and lengthy development cycles while trying to process unstructured medical documents under strict HIPAA standards. To solve this, they built a multi-tenant, event-driven agentic workflow framework called the SmartProminence AI Orchestrator on AWS using Amazon Bedrock, ECS, and SQS. The new system reduced manual review effort by 90% and shortened AI feature deployment times from months to weeks.

    DEPTH ■■■■■12 min read3 weeks ago

    Sign in to save and rate

  17. 37Stack Overflow · practice

    The Regression Tests Nobody Writes: Capturing How Software Actually Behaves

    Standard regression tests usually only verify developer intent rather than the actual, unwritten behaviors that systems accumulate in production over time. By capturing real production traffic and network-level interactions, teams can build characterization test suites to automatically detect unintended behavioral shifts. This approach prevents accidental regressions during legacy refactoring, rewrites, and major framework upgrades.

    DEPTH ■■■■■6 min read3 days ago

    Testing

    Sign in to save and rate

  18. 38Amazon Web Services · architecture

    Build adaptive AI interfaces with the AG-UI protocol, agent swarms, and Nova Act on AWS

    AI applications produce variable outputs that cannot be effectively handled by static user interfaces, leading to development friction and poor user experiences. The team implemented an adaptive interface pattern using the AG-UI protocol, the Strands Agents SDK Swarm pattern, and Amazon Nova Act on AWS to dynamically render components and automate legacy integrations. This architecture streams agent findings over Server-Sent Events, enabling real-time multi-agent consensus and reducing interface development overhead.

    DEPTH ■■■■■22 min read3 weeks ago

    Sign in to save and rate

  19. 39Cloudflare · practice

    Localizing compliance at scale: achieving South Korea’s ISMS certification

    To achieve South Korea's ISMS certification, Cloudflare had to modify its account sign-up flow to itemize required consents and disable third-party social logins that bypassed the form. By combining IP geolocation with user country selection, the team ensured localized compliance without breaking global functionality. The resulting certification provides a localized assurance benchmark for Korean users.

    DEPTH ■■■■■8 min read3 days ago

    Security

    Sign in to save and rate

  20. 40Stack Overflow · practice

    Survey Says: You'll swap the model, but everything you build around it is staying put

    Stacklok surveyed technical leaders to understand enterprise AI adoption and vendor lock-in concerns. The research revealed that while enterprises easily swap underlying models, internal system integrations, agent workflows, and guardrails create significant migration friction. Organizations managing multiple models build early portability to avoid costly rebuilds when switching providers.

    DEPTH ■■■■■4 min read4 days ago

    Machine Learning

    Sign in to save and rate