Understanding Site Topics Fundamentals 3: Costs, Limits and Trade-offs

In practice, log analysis behaves differently: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. The same reasoning holds for log analysis. For log analysis, the constraint matters more than the feature list. The signal you want is often already logged, just not aggregated.

Rate Limiting: Serving static bytes is the cheapest thing you can do at the edge. Rate Limiting: A schema is an interface; changing it is a migration, not an edit. Rate Limiting: Track the denominator as carefully as the numerator.

Monitoring Alerts: You can often replace a coordination problem with an idempotency key. Monitoring Alerts: Anything that grows without a bound will eventually hit one. Monitoring Alerts: Documentation that is not tested tends to describe the previous version.

In practice, release process behaves differently: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. The same reasoning holds for release process. For release process, the constraint matters more than the feature list. Costs usually concentrate in a small number of operations, so find those first.

If the rollback plan needs a meeting, it is not a rollback plan. That applies to schema migration as well. In practice, schema migration behaves differently: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. The same reasoning holds for schema migration.

The interesting number is not the average, it is the 99th percentile. The same reasoning holds for crawl budget. For crawl budget, the constraint matters more than the feature list. Adding a cache in front of a slow query is a fix; fixing the query is a cure. Teams working on crawl budget usually discover this the hard way. Every abstraction you add is a place where behaviour can differ from intent.

Many screens can be completed with urine, blood or self-collected swabs. A genital or pelvic examination is not automatically required for an STI screen; a clinician may suggest one if symptoms or another clinical question make it relevant. You can ask what an examination would involve and why it is being offered. You may ask to pause or stop at any point, and consent to one part of an appointment does not mean consent to every part.

Rate Limiting: If the rollback plan needs a meeting, it is not a rollback plan. Rate Limiting: Small pages that stay small are easier to keep fast than large ones made fast. Rate Limiting: Write the invariant down; otherwise it lives only in someone's memory.

Serving static bytes is the cheapest thing you can do at the edge. That applies to cost controls as well. In practice, cost controls behaves differently: A schema is an interface; changing it is a migration, not an edit. Track the denominator as carefully as the numerator. The same reasoning holds for cost controls.

Cost Controls: If the rollback plan needs a meeting, it is not a rollback plan. Cost Controls: Small pages that stay small are easier to keep fast than large ones made fast. Cost Controls: Write the invariant down; otherwise it lives only in someone's memory.

Release Process: If a metric has no owner, it will drift until it causes an incident. Release Process: The cheapest optimisation is usually removing work nobody asked for. Release Process: Aggregating at write time trades flexibility for predictable read cost.

Consider api design specifically. If the rollback plan needs a meeting, it is not a rollback plan. API Design: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to api design as well.

Data Pipelines: If a metric has no owner, it will drift until it causes an incident. Data Pipelines: The cheapest optimisation is usually removing work nobody asked for. Data Pipelines: Aggregating at write time trades flexibility for predictable read cost.

Access Control: A queue smooths spikes but also hides how far behind you are. Retries without jitter turn a small outage into a large one. That applies to access control as well. In practice, access control behaves differently: Separating the reads from the writes buys room to change either side.

Teams working on api design usually discover this the hard way. A design that cannot be rolled back is a design that cannot be changed safely. Latency budgets are easier to defend when every hop has a stated ceiling. This is most visible in api design. Consider api design specifically. Caching helps only until the invalidation rules become the bottleneck.

Consent is closely related to sexual boundaries. It concerns a freely made agreement to a specific activity, and it can be withdrawn. Agreement to one form of contact does not automatically mean agreement to another, and a previous yes does not settle what someone wants now. NHS guidance in the UK, for example, explains consent in terms of choice and freedom to change one’s mind; legal definitions and requirements differ across countries.

Content Delivery: Configurations should be reviewable in a diff, not only in a console. Content Delivery: The best time to add an index is before the table gets large. Content Delivery: Failures are usually correlated, so plan for the shared dependency.

Search Indexing: Periodic jobs should be safe to run twice, because they will be. Search Indexing: You rarely need a new component to fix a boundary problem. Search Indexing: The signal you want is often already logged, just not aggregated.

Monitoring Alerts: Configurations should be reviewable in a diff, not only in a console. Monitoring Alerts: The best time to add an index is before the table gets large. Monitoring Alerts: Failures are usually correlated, so plan for the shared dependency.

Backup Strategy: A design that cannot be rolled back is a design that cannot be changed safely. Backup Strategy: Latency budgets are easier to defend when every hop has a stated ceiling. Backup Strategy: Caching helps only until the invalidation rules become the bottleneck.

Observability: You can often replace a coordination problem with an idempotency key. Observability: Anything that grows without a bound will eventually hit one. Observability: Documentation that is not tested tends to describe the previous version.

Observability: A queue smooths spikes but also hides how far behind you are. Observability: Retries without jitter turn a small outage into a large one. Observability: Separating the reads from the writes buys room to change either side.

You can often replace a coordination problem with an idempotency key. The same reasoning holds for release process. For release process, the constraint matters more than the feature list. Anything that grows without a bound will eventually hit one. Teams working on release process usually discover this the hard way. Documentation that is not tested tends to describe the previous version.

If a metric has no owner, it will drift until it causes an incident. This is most visible in observability. Consider observability specifically. The cheapest optimisation is usually removing work nobody asked for. Observability: Aggregating at write time trades flexibility for predictable read cost.