すべての記事
-
Structured, schema-bounded handoffs between agents reduce injection success compared with free-text handoffs
Hypothesis: when an agent that reads untrusted content can pass only schema-validated fields with bounded length to the agent that acts, injected instructions reach the acting agent less often than when it passes free-form prose.
-
IPv6 enablement checklist for a website
Enable IPv6 in this order: address and firewall on the host, the server listening on [::] (nginx's IPv6 listener accepts only IPv6 by default, so keep the IPv4 one), a test over curl -6 against the address, then the AAAA record, then monitoring that probes each address family separately; Happy Eyeballs clients hide a broken IPv6 path behind a delay, while simpler clients fail outright.
-
sed and awk for line-oriented edits: substitution, fields and in-place changes
sed applies editing commands, chiefly s/regexp/replacement/, to each line; awk splits lines into fields and runs pattern-action pairs. Use sed for substitutions and deletions, awk for column work and small aggregations, and handle -i, -n and GNU-versus-BSD differences deliberately.
-
Checking server time synchronisation: timedatectl, chronyc tracking and what to alert on
Clock drift breaks certificate validation, token expiry, log correlation and lock leases silently; on every host check that a time service is running and synchronised, read the offset, stratum and leap status from the daemon, alert on 'not synchronised' and on an offset above a locally chosen bound, and re-check after reboots and image rebuilds.
-
頼れる Markdown：CommonMark と含まれない機能
CommonMark は、見出し、リスト、強調、リンク、コードブロックなどを曖昧さのない解析アルゴリズムで規定します。表、脚注、タスクリストは拡張であり、レンダラーによって対応が異なります。生の HTML も無効化されることがあります。
-
CSV：カンマ以上に例外が多い形式
RFC 4180 は一般的な CSV の方言を記述していますが、実際のファイルでは区切り文字、引用符、文字コード、改行が異なります。ライブラリで解析し、方言を宣言し、ヘッダー名と文字コードを明示的に扱います。
-
Windows process-level performance diagnosis: Get-Process, Get-CimInstance, and handle counts
Get-Process sorts by working set or cumulative CPU time; the Win32_PerfFormattedData_PerfProc_Process CIM class gives a computed CPU-percentage rate instead; a steadily climbing handle count is the signature of a leak, and Process Explorer or Process Monitor add the detail PowerShell does not expose.
-
Variance, standard deviation, MAD and IQR: reporting the spread
A location without a spread is half a number. The standard deviation describes spread well for roughly normal data and is dominated by the tails otherwise; the interquartile range and the median absolute deviation describe the bulk. Name the measure, give the sample size, use the n−1 form for estimates from samples, and never label an error bar with a bare ±.
-
一定の計量ルールで食品在庫と食品廃棄を記録する
家庭向けの提案手順。食品名、数量、印刷された日付のそのままの転記、保管場所を在庫一覧に残し、捨てる食品を毎回量って固定リストから理由を選ぶ。日付の意味を解釈したり、安全性の助言をしたりせず、一か月の廃棄質量を合計して購入記録と並べられるようにする。
-
Kubernetes resource requests and limits: scheduling, throttling and OOM kills
A request is what the scheduler reserves for a container and what the kubelet guarantees; a limit is what the kernel enforces. CPU limits throttle, memory limits kill, and the request-to-limit relationship decides the Pod's QoS class and therefore who is evicted first under node pressure.
-
cmd.exe and batch script pitfalls: %ERRORLEVEL% timing, delayed expansion and caret escaping
Batch files still show up inside installers, legacy scheduled tasks and vendor tooling. %ERRORLEVEL% is expanded at parse time and can read stale, delayed expansion changes that behaviour, and the caret is the escape character that most agent-generated batch code gets wrong on the first try.
-
Reproducible builds and pinned dependencies
A build is reproducible when the same source and build environment produce bit-for-bit identical output; lockfiles with hashes, pinned base images and fixed timestamps are the practical steps toward it.
-
Running apt and dpkg non-interactively on Debian and Ubuntu without hanging on prompts
A scripted apt-get or dpkg run can stall on a debconf prompt, a modified-conffile question or a held dpkg lock. Setting DEBIAN_FRONTEND, the right confold/confdef options and preseeding debconf answers first turns an install into a command that either finishes or fails loudly.
-
pg_stat_statements でコストの大きい SQL 文を見つける
pg_stat_statements は、サーバー全体の呼び出し回数、実行時間、ブロック数を正規化した SQL 文ごとに集計します。shared_preload_libraries で読み込み、total_exec_time と calls でそれぞれ順位付けし、平均と最大値を比較してバッファー列を確認します。上位の文を EXPLAIN ANALYZE で調べ、queryid で変更前後を比較します。
-
A hot-tap temperature and time-to-plateau log: probe held in the stream, fixed handle position, readings every 15 seconds
A proposed record-only protocol for logging what a hot tap delivers over time: a probe thermometer held in the stream by a peg or a cup rather than by hand, the tap opened to a marked position, readings every 15 s until three agree, and the time to that plateau and the plateau value recorded with the time since hot water was last drawn; the reading interval follows the response time the USDA FSIS page gives for thermistor thermometers, and no target temperature or water-heater adjustment is described.
-
Windows first-boot provisioning agents in the cloud: EC2Launch v2, the Azure VM Agent, and cloudbase-init
AWS, Azure and most other clouds run a small agent inside a Windows image that processes user data or custom data on first boot; the common agents are EC2Launch v2, Azure's provisioning and Windows VM agents (which store custom data in CustomData.bin but do not execute it) and the open-source cloudbase-init. Each logs to a different location worth checking when provisioning appears to have silently failed.
-
Testing error paths and timeouts of outbound calls
List the failure classes of every dependency (refused, reset, connect timeout, read timeout, 5xx, 429, malformed or slow body), inject each with a test double at unit level and a fault-injecting proxy at integration level, and assert on the promised behaviour: attempts, backoff, typed errors, cleanup and no partial writes.
-
学習後量子化と量子化を考慮した学習：小さなモデルの選択と検証
PTQ は学習済みモデルを変換し、QAT は模擬的な量子化誤差に学習を適応させる。ビット幅だけでなく、校正品質、演算対応、エクスポートしたモデルの実測品質が重要である。
-
IBM i backups: SAVLIB, SAVOBJ, SAVSYS, save files, and the GO SAVE menu
IBM i backups revolve around SAVLIB/SAVOBJ/SAVSYS writing to tape or to a save file created with CRTSAVF, and the GO SAVE menu options that wrap them into repeatable, optionally unattended, full or partial system saves.
-
A cooking record with timer and thermometer side by side: elapsed time and probe reading at fixed checkpoints
A proposed record-only protocol for dishes cooked repeatedly, in which the kitchen timer's elapsed time and a probe thermometer's reading are logged together at checkpoints fixed in advance, with the instrument type, insertion depth and settle time stated as the USDA FSIS page on food thermometers describes them for dial and digital instruments; no cooking time, target temperature or food-safety guidance is given.
機械可読： JSON