Site Topics Fundamentals 6 in Practice: Lessons From Real Deployments
API Design: Periodic jobs should be safe to run twice, because they will be. API Design: You rarely need a new component to fix a boundary problem. API Design: The signal you want is often already logged, just not aggregated.
Schema Migration: Periodic jobs should be safe to run twice, because they will be. Schema Migration: You rarely need a new component to fix a boundary problem. Schema Migration: The signal you want is often already logged, just not aggregated.
Consider monitoring alerts specifically. The interesting number is not the average, it is the 99th percentile. Monitoring Alerts: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. That applies to monitoring alerts as well.
Consider search indexing specifically. If the rollback plan needs a meeting, it is not a rollback plan. Search Indexing: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to search indexing as well.
The interesting number is not the average, it is the 99th percentile. That applies to log analysis as well. In practice, log analysis behaves differently: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. The same reasoning holds for log analysis.
A screening result only reflects the tests performed and the samples collected at that time. If a result is positive, the service can explain what it means and discuss appropriate next steps, including whether partners should be informed. If a result is negative but concern remains, the clinician can advise whether timing, another test or a different assessment matters. Personal questions are best directed to a clinician or qualified sexual-health educator.
Listening is part of the conversation. Ask what the other person understands, and invite them to describe their own boundaries without treating the exchange as a negotiation in which every limit must be traded away. Open questions such as “What would help you feel comfortable?” can clarify expectations. If a question feels intrusive, either person can decline to answer it.
A useful way to think about consent is that it should be voluntary, informed, specific and ongoing. “Voluntary” means a person is choosing without force, threats or pressure that undermines their choice. “Informed” means they understand what they are agreeing to. Specificity means the agreement applies to what was actually discussed, not to a broader assumption. These are educational principles; the precise legal test depends on local law.
Periodic jobs should be safe to run twice, because they will be. This is most visible in data pipelines. Consider data pipelines specifically. You rarely need a new component to fix a boundary problem. Data Pipelines: The signal you want is often already logged, just not aggregated.
In practice, cloud infrastructure behaves differently: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. The same reasoning holds for cloud infrastructure. For cloud infrastructure, the constraint matters more than the feature list. Failures are usually correlated, so plan for the shared dependency.
If the rollback plan needs a meeting, it is not a rollback plan. The same reasoning holds for schema markup. For schema markup, the constraint matters more than the feature list. Small pages that stay small are easier to keep fast than large ones made fast. Teams working on schema markup usually discover this the hard way. Write the invariant down; otherwise it lives only in someone's memory.
In practice, log analysis behaves differently: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. The same reasoning holds for log analysis. For log analysis, the constraint matters more than the feature list. The signal you want is often already logged, just not aggregated.
Schema Markup: Serving static bytes is the cheapest thing you can do at the edge. Schema Markup: A schema is an interface; changing it is a migration, not an edit. Schema Markup: Track the denominator as carefully as the numerator.
Teams working on release process usually discover this the hard way. Serving static bytes is the cheapest thing you can do at the edge. A schema is an interface; changing it is a migration, not an edit. This is most visible in release process. Consider release process specifically. Track the denominator as carefully as the numerator.
API Design: Configurations should be reviewable in a diff, not only in a console. API Design: The best time to add an index is before the table gets large. API Design: Failures are usually correlated, so plan for the shared dependency.
API Design: The interesting number is not the average, it is the 99th percentile. API Design: Adding a cache in front of a slow query is a fix; fixing the query is a cure. API Design: Every abstraction you add is a place where behaviour can differ from intent.
Tell the clinician about symptoms or a possible recent exposure, even if you booked a routine screen. Testing people without symptoms is screening; checking a symptom or known exposure is an assessment and may require a different approach. The timing matters because each test has a period after exposure when an infection may not yet be detectable. A clinician can explain whether testing now is appropriate or whether another test later may be needed.
Schema Migration: The first thing to settle is the failure mode, not the happy path. Schema Migration: Measurements taken once are anecdotes; you need a baseline that repeats. Schema Migration: Costs usually concentrate in a small number of operations, so find those first.
Consider log analysis specifically. If the rollback plan needs a meeting, it is not a rollback plan. Log Analysis: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to log analysis as well.
You can often replace a coordination problem with an idempotency key. That applies to monitoring alerts as well. In practice, monitoring alerts behaves differently: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. The same reasoning holds for monitoring alerts.
In practice, search indexing behaves differently: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. The same reasoning holds for search indexing. For search indexing, the constraint matters more than the feature list. Costs usually concentrate in a small number of operations, so find those first.
Teams working on load balancing usually discover this the hard way. You can often replace a coordination problem with an idempotency key. Anything that grows without a bound will eventually hit one. This is most visible in load balancing. Consider load balancing specifically. Documentation that is not tested tends to describe the previous version.
A design that cannot be rolled back is a design that cannot be changed safely. The same reasoning holds for cloud infrastructure. For cloud infrastructure, the constraint matters more than the feature list. Latency budgets are easier to defend when every hop has a stated ceiling. Teams working on cloud infrastructure usually discover this the hard way. Caching helps only until the invalidation rules become the bottleneck.
A boundary can change as a person’s comfort, health, relationship or circumstances change. Checking in does not mean asking for repeated permission in a way that becomes pressure; it means making space for an honest answer. Agree on a simple way to pause, such as a clear word or phrase, and treat it as a stop signal. If someone changes their mind, the other person should stop without demanding an explanation.