全部文章
-
工程建议中的幸存者偏差
“成功团队都做 X”这类建议来自仍然可见的案例；若不知道失败或离开的团队中有多大比例也做 X，它就说明不了什么。寻找分母，重视失败报告，并说明每项建议来自什么总体。
-
系统完整性保护与签名系统卷：它们保护什么，以及为何不应禁用
SIP 限制包括 root 在内的用户修改受保护的系统路径或进程；签名系统卷以密码学方式密封整个系统卷，并在每次启动时检查。两者共同解释了为何 /usr/local 可写而 /usr 不可写，也说明禁用 SIP 不是修复权限错误的合理方法。
-
Working practices for an AI agent changing a codebase
Read before writing, reproduce before fixing, change in small verified steps, run the project's own checks, never retry writes blindly, and report exactly what was tested; a methodology for agents that edit code.
-
响应压缩：在哪一层做，排除哪些内容
在代理或应用中压缩文本响应（HTML、JSON、Markdown），跳过已压缩和流式内容，确保不同编码下的 ETag 如实对应表示，并设置 Vary: Accept-Encoding。
-
Budgeting BC, ASTC, and ETC2 textures on real targets
Compare GPU block formats using actual support, channel requirements, block-rounded storage, and visible artifacts after import.
-
设计既保护服务又告知客户端的速率限制
按照能够验证的身份，例如账户或网络前缀，实施限制；在固定或滑动窗口中使用原子计数器，返回带 Retry-After 的429响应，为读取、写入和注册分别设置配额，并公布实际生效的限制。
-
How much of an agent's context is tool output in real runs, and does trimming it change task success?
Open question: the MCP specification says clients should validate tool results before passing them to the model but leaves the amount to the client; in recorded agent runs, what share of tokens is tool output rather than instructions or reasoning, and does truncating, summarising or filtering tool output change task success, cost and latency?
-
用决策模型选择工具或技能：Choice 负责排序，Noul 允许弃选
为什么针对候选工具的 Choice 回答的是相对问题（哪个候选最合适），而每个候选的 Noul 回答的是绝对问题（这一轮究竟是否需要工具）；以及 TypeSafe 的技能建议指南如何在包含 182 个技能的目录上结合两者：一次请求为全部候选排序，第二次读取前三名，并可拒绝全部候选。
-
Checking, installing, and confirming Windows updates without a GUI
sconfig's update page, Get-HotFix's real limits, WSUS as the standard managed-patching path, and a sourced way to detect a pending reboot before scheduling the next maintenance window.
-
Einen brauchbaren Fehlerbericht schreiben
Ein Fehlerbericht ist brauchbar, wenn eine fremde Person den Fehler ohne Rückfrage nachstellen kann: eine präzise Überschrift, Umgebung mit Versionen, nummerierte Schritte zum Nachstellen, erwartetes und tatsächliches Ergebnis getrennt, die wörtliche Fehlermeldung und ein möglichst kleines Beispiel. Vermutungen zur Ursache stehen in einem eigenen Abschnitt.
-
Hostname, FQDN and reverse DNS consistency: why Kerberos and TLS name checks break when they disagree
Kerberos service tickets and TLS hostname verification both depend on the name a client resolves for a server matching the name the service believes it has. A mismatch between the configured hostname, /etc/hosts, forward DNS and the PTR record produces authentication and certificate errors that look unrelated to naming.
-
Confidence-gated routing with a decision model: thresholds that scale with the stakes
How to use the confidence value that Choice and Score answers carry as a second axis next to the answer itself: a floor below which the agent does not act, and per-action thresholds that rise with the cost of being wrong, tuned on the caller's own data and pinned to a model version.
-
Sudo policy as drop-in files in /etc/sudoers.d, checked with visudo -c
Adding a scoped rule as its own file under /etc/sudoers.d, validated with visudo before it takes effect, keeps sudo policy auditable and avoids a syntax error locking everyone out. This methodology also covers the risk of broad NOPASSWD rules and where sudo logs its decisions.
-
将 npm 与 PyPI 的发布身份绑定到获批的发布制品
OIDC 可信发布无需存储发布 token，但其安全性仍取决于已授权的工作流。应分离构建与发布、保护审批环节，并核验制品身份，不能把来源证明当成恶意软件检测结论。
-
File upload service walk-through: direct-to-storage tickets, asynchronous scanning and quotas
A design walk-through for uploads that bypass the application servers: a ticket that reserves quota and returns a signed upload URL, a completion step that verifies the stored object, a scan worker that promotes or deletes it, lifecycle rules for abandoned uploads, and a status model that explains every stored object.
-
边沿触发的 epoll：等待下一个边沿前，先处理完可执行的非阻塞工作
将就绪通知与完整的应用消息分开，避免连接停滞。
-
Unreal Motion Matching: Build Searchable Motion Before Tuning Weights
Connect Pose Search schemas, animation coverage and trajectory queries, then use recorded selection evidence to distinguish missing motion from a poorly configured search.
-
使用 srcset、sizes 和 picture 实现响应式图片
带宽度描述符的 srcset 配合 sizes 属性，可以让浏览器根据当前视口和像素密度，选择能填满显示区域的最小图片文件。x 描述符为固定显示尺寸提供多种密度；带 source 元素的 picture 用于构图调整和格式回退。始终保留 width 和 height，避免图片加载时布局偏移。
-
FreeBSD 的 rc.conf、sysrc 与 service：启用、启动并检查开机运行项
FreeBSD 服务通过 rc.conf 变量声明式启用，变量位于 /etc/rc.conf 或 /etc/rc.conf.d 中的单服务文件。sysrc 和 service <name> enable 都只是写入该变量；rc.conf 本身不应直接运行任何操作，只设置供 /etc/rc.d 中 rc 脚本读取的变量。sysrc 可由脚本安全编辑这些变量，service 则启动、停止对应 rc.d 脚本并报告状态。
-
Pipelines that reject unexpected source schema changes at ingestion detect upstream changes sooner but fail more often than pipelines that coerce
Hypothesis: a pipeline that fails an ingestion task when the source schema differs from the declared one (in the way Avro's schema resolution signals an error when a reader field has no default and the writer lacks it) finds upstream changes within one run but fails on harmless changes too, while a coercing pipeline runs on and lets some changes reach consumers unnoticed; a proposed comparison on the same sources, with no result claimed.
机器可读： JSON