Web Engineering •
Vercel Deployment Retention Policy: What Oct 23 Deletes
Set your Vercel deployment retention policy before October 23 deletes old builds. The 30-day change, $0.10/GB-month math, and what rollback loses.
8 min read
Read more →
Web Engineering •
Is Your Postgres Migration Safe? Catch the Table Lock First
Is your Postgres migration safe? Not if it takes ACCESS EXCLUSIVE on a hot table. The lock table and 5-step check that catches it before you run it.
8 min read
Read more →
AI Coding Agents & DX •
Turnstile backend validation: what Cloudflare Spin actually fixes
Turnstile backend validation is the step most setups skip. The widget still renders while bots slip through unchecked. Here is how Spin fixes it, step by step.
7 min read
Read more →
Web Engineering •
Fix Performance Regressions With a Benchmark Ratchet (3.1x, 0 Breaks)
Fix performance regressions with a benchmark ratchet that fails CI on regression and locks in wins. How Claude shipped 3,000 changes at 3.1x, zero breaks.
9 min read
Read more →
Web Engineering •
Fix Shadow DOM innerHTML not working: use setHTMLUnsafe
Shadow DOM innerHTML not working is a parsing gap, not a bug — it silently skips declarative shadow roots. Use setHTMLUnsafe() instead, plus five more gotchas.
9 min read
Read more →
Web Engineering •
Deploy FastAPI on Cloudflare Workers: the packages pip won't install
Deploy FastAPI on Cloudflare Workers now that Python is GA: what pip installs cleanly, what needs a Wasm build, and the C-extension wall in between.
7 min read
Read more →
Web Engineering •
Post-Quantum TLS Migration: Stop Paying the 150ms Retry Tax
Post-quantum TLS migration checklist: X25519MLKEM768 cut Cloudflare's handshake retries from 52% to 3.7%. How to check, enable, and verify on your own origin.
9 min read
Read more →
Web Engineering •
Build JavaScript Proxy Reactive State: 855 Bytes, No Framework
Javascript proxy reactive state in under a kilobyte: an 80-line get/set trap that tracks reads, batches writes, and quietly breaks on one property name.
9 min read
Read more →
Web Engineering •
Migrate to a New CMS With Zero Downtime: a 28K RPS DDoS Mid-Rollout
Here is how to migrate to a new CMS with zero downtime: a cookie-routed proxy Worker, staged 1%-100% rollout, and a 28,000 RPS DDoS absorbed mid-migration.
10 min read
Read more →
Web Engineering •
Rust dyn Trait vs generics: how to switch, and the 16-byte cost
Rust dyn Trait vs generics: how to switch, and the 16-byte fat-pointer cost dyn Trait pays on every call — the cost generics compile away.
8 min read
Read more →
Web Engineering •
How to Give an AI Agent CMS Write Access Without Melting the Cache
AI agent CMS write access breaks caches fast. The layered invalidation pattern that let one CMS absorb 5,000 RPS spikes and a 28,000 RPS DDoS without a hiccup.
11 min read
Read more →
Web Engineering •
How to Reduce Rust Struct Memory Footprint: 5 Techniques, 56% Smaller
How to reduce Rust struct memory footprint: the 5 layout changes that shrank a real cache entry from 953 to 420 bytes, and what each one costs.
10 min read
Read more →
Web Engineering •
SVG to MP4 in the browser: a two-step workflow, no server
SVG to MP4 in the browser needs no server: paste a URL and 30MB of ffmpeg.wasm renders every frame in your tab. The one catch that trips people up.
8 min read
Read more →
Web Engineering •
Use Postgres for everything in production: 5 swaps, 1 cliff
Use Postgres for everything and four of the five swaps hold. The queue is the one that death-spirals: 383,000 dead tuples and 300ms locks at 800 jobs/sec.
8 min read
Read more →
Web Engineering •
Remove Cloudflare beacon.min.js: you must opt in to opt out
Remove Cloudflare beacon.min.js for good: the disable toggle hides behind adding your site to Web Analytics first, and no-transform is the stronger lever.
9 min read
Read more →
Web Engineering •
Fix the Datasette SQL Injection: Why execute-sql Won't Save You
The Datasette SQL injection patched in 1.0a38 and 0.65.3 leaks private tables via unescaped filter columns. The check, upgrade, and why execute-sql is no fix.
8 min read
Read more →
Web Engineering •
How to Make Your Site Agent-Readable: 4 Layers, One Worker
Make your site agent-readable in four layers — readable, discoverable, callable, payable. Three are build-time files; only /mcp needs a Worker.
10 min read
Read more →
AI Engineering •
Ads for AI Agents: TIME Serves Crawlers a Different Site
Ads for AI agents are live. TIME serves crawlers a 42 KB markdown site with sponsored blocks; humans and Googlebot get 1.2 MB of HTML. I measured all of it.
10 min read
Read more →
Web Engineering •
React Server Components in 2026: The Mental Model, the use client Boundary & When Not to Use Them
React Server Components in 2026: the mental model that finally clicks, the use client boundary rules, and when NOT to use them — with the Web Vitals payoff.
7 min read
Read more →
Web Engineering •
Streaming HTML Out of Order Without JavaScript (2026)
Streaming HTML out of order without JavaScript: how Declarative Partial Updates and Declarative Shadow DOM reorder content natively in Chrome 148.
13 min read
Read more →
Web Engineering •
FastAPI Finally Has Native SPA Support: app.frontend() Explained
FastAPI 0.138.0 ships app.frontend() — a native way to serve React, Vue, and Svelte SPA builds. How it works, real use cases, and what it still can't do.
8 min read
Read more →