Two Payment-Processing Holes AI Assistants Leave by Default
Ask an assistant to "add payments" and you get code that works. Click the button, pay, get access. The tests pass, the demo goes out to the client.
Read articleEngineering field notes · 2023—2026
Architecture is a series of choices.
Practical notes on the systems we build, the constraints we work within, and the engineering decisions behind reliable software.
The archive
Ideas, systems, and engineering decisions.
Browse recent notes or filter the archive by topic, year, or keyword.
Faceted Search with Active Filters
Facets in an online store look simple until the first filter gets applied.
Read articleRejection Is an Event, Not a Status: Redesigning the Data Model
Legal technical debt piles up unnoticed and only shows up as distorted data. Here is what that looks like up close: one boolean field in the schema, 142 records, and a system…
Read articlexk6-SIP: Load Testing in CI
How to set up load testing from scratch and wire it into CI, using xk6-sip — an extension for the k6 load tool aimed at VoIP/SIP telephony — as the example. On every push…
Read articlexk6-SIP: Audio Quality Checks in Load and Automated Tests
How audio quality checks work in xk6-sip, an extension of the k6 load testing tool for VoIP/SIP calls: recording a call, scoring what the callee heard against a reference, and…
Read articlexk6-SIP: Monitoring VoIP/SIP Load Tests
This article walks through how observability works in xk6-sip — an extension for the load-testing tool k6 that automates load and functional testing of VoIP/SIP calls: where…
Read articlexk6-SIP: Telephony as Code
It is 2026. Web services are tested with cloud orchestrators: thousands of virtual users spin up from a pipeline, metrics land in Prometheus, and an alert catches degradation…
Read articleVideo Streaming in Angie
Video delivery is still a live topic on the modern web. Most video traffic is carried by the large services, of course, but small specialized solutions still have their place.…
Read articleDNS over HTTPS in Angie with ACME Certificates
You have probably come across the Angie server's features as a reverse proxy and web server with HTTPS support. Angie can also proxy and balance TCP and UDP services, including…
Read articleWorking with HTTP Request and Response Headers in Angie
Headers do much of the work in web applications. They describe properties of a request or response, control caching, handle security, and help track down problems. This article…
Read articleWorking with Variables in Angie
Variables in the Angie server are used for advanced control over request handling, more flexible configurations, and for gathering detailed information about clients and…
Read articleLogging in Angie
Reliable operation of any service rests on its logging system. Logs solve a wide range of problems: troubleshooting, user behavior analytics, security incident investigation…
Read article