Smart endpoints, dumb pipes: the zero-trust split
The gateway, mesh, and app split security with zero duplicated code — and mTLS makes the network the un-bypassable second lock. Plus an interactive guide.
SecurityMicroservicesmTLS
Read articleArticles
Notes from production
Field notes on shipping AI you can trust — evals, RAG, agents, and the engineering discipline around them.
Message brokers: one mental model
Kafka, NSQ, NATS, RabbitMQ and AWS rename the same few ideas — topic, consumer group, worker. One shared map, plus an interactive guide to explore it.
MessagingArchitectureEvent-Driven
True/false vs positive/negative, explained
The confusion matrix in one 2×2 box — true/false vs positive/negative — with a plain-English read, software cases, and a medical screening example.
FundamentalsTestingMetrics
Cookie security: SameSite, HttpOnly, Secure
The three cookie flags that stop the common session attacks — SameSite blocks the forged request, HttpOnly stops the stolen token, Secure guards the wire.
SecurityCookiesCSRF
Shipping a design system at ui.pangaea.id
How we turned Pangaea's rv-* UI into versioned @labspangaea/ds-* packages, shipped a live catalog at ui.pangaea.id, and automated releases with Changesets.
Design SystemsMonorepoCI/CD
Building ZeroPaste: Rust + WASM on Cloudflare
How we built ZeroPaste — an end-to-end encrypted, burn-on-read pastebin — in Rust→WASM on a Cloudflare Worker, with KV + Durable Objects, deployed via CI.
RustCloudflareWebAssembly
Go garbage collection: stack, heap, and pointers
How Go's garbage collector decides when to run, why the stack is free and the heap is not, and when a pointer actually helps — in plain English.
GoGarbage CollectionMemory
Soft 404: make Cloudflare Pages return a real 404
Why a static site returns 200 for a missing page — a soft 404 Google penalizes — and the fix: a top-level 404.html per locale so Cloudflare returns a real 404.
CloudflareSEO404
Database engines: when to use which
Six database engine families — key-value, document, wide-column, columnar, graph, relational. Each one's read/write flow, and when to reach for it.
DatabasesArchitectureNoSQL
Big-O notation for everyday code, explained
The six growth shapes that come out of if/else, loops, nested loops, recursion, and binary search — each with a graph and a plain-English why, plus a leaderboard.
Big-OAlgorithmsComplexity