全部文章
-
构建小巧、可复现的容器镜像
按摘要固定基础镜像，从锁文件安装并检查哈希，只复制运行时需要的内容，以非 root 用户运行，添加健康检查，并让秘密远离镜像层和构建参数。
-
Keyboard navigation in composite widgets: roving tabindex, arrow keys and Escape
Tab and Shift+Tab move between components; arrow keys move inside a component such as a tab list, toolbar, menu or radio group. Implement this with a roving tabindex (one item at tabindex=0, the rest at -1) or aria-activedescendant, close transient surfaces with Escape, and never trap focus without an advertised way out.
-
分割保形预测：具有边际覆盖率的区间
使用留出的残差、有限样本修正分位数和明确的可交换性假设，将固定回归模型扩展为预测区间生成流程。
-
Long-running operations: 202 Accepted and a status resource
When a request takes longer than a client should wait, respond 202 Accepted with an operation resource the client can poll, expose done, error and result on it, say when it expires, and keep the eventual result retrievable; RFC 9110 and Google's AIP-151 describe the shape.
-
Screen-Space Reflections: Know What the Camera Buffers Cannot Show
Diagnose screen-space reflection misses, depth-thickness artifacts and fallback transitions, while budgeting ray work separately from reconstruction.
-
Checking NFS, Samba, chrony, Unbound and Kea health from the command line: a checklist
A five-minute command-line pass to confirm each infrastructure service is running and answering correctly: rpcinfo -p and showmount -e for NFSv3 (exportfs -v and connected sockets on an NFSv4-only server), smbstatus for Samba, chronyc tracking and chronyc clients for time, unbound-control status for the resolver, and the Kea lease file or kea-shell for DHCP.
-
在 JSON 中表示物理量：将数值、单位和精度分开
在 JSON 中传递测量或计算所得量的流程：每类量采用一个规范单位；固定单位字段在名称中写明单位，混合单位字段使用“数值加单位”对象并采用受控单位代码；明确说明精度，而不是依赖数字位数；需要精确十进制值时使用字符串。
-
测试金字塔与各类测试的位置
测试金字塔建议安排大量快速单元测试、较少的集成测试和极少的端到端测试；这种形状源于速度、隔离性和诊断价值，而非教条。
-
Software-Stücklisten (SBOM): das Inventar der eigenen Lieferkette
Eine Software-Stückliste zählt maschinenlesbar auf, welche Komponenten in welcher Version in einem gelieferten Artefakt stecken. SPDX (ISO/IEC 5962:2021) und CycloneDX (OWASP) sind die verbreiteten Formate; erzeugt wird sie pro Release aus dem gebauten Artefakt, daneben abgelegt und zum Abgleich mit Schwachstellenmeldungen und Lizenzpflichten genutzt. Zusammen mit Herkunftsnachweisen (SLSA) macht sie die Lieferkette prüfbar.
-
Host firewalls compared: nftables, firewalld, ufw, Windows Defender Firewall, pf and ipfw
Listing rules, opening a port, making the change survive a reboot, and doing it without locking yourself out over SSH or RDP — the same four tasks across nftables, firewalld, ufw, Windows Defender Firewall, and the BSD pf and ipfw packet filters.
-
Rechecking volatile facts when resuming a coding session
Resume an interrupted coding task without treating an earlier session summary as a current observation of files, running processes, or external state.
-
How faithful must an API sandbox be, and how do providers keep it that way?
Open question: providers such as Twilio (test credentials with magic input values) and PayPal (a self-contained sandbox mirroring production features) publish sandboxes, but which fidelity level, seed data and drift-control practices have let integrators catch real integration bugs before production without the sandbox becoming a second product to maintain?
-
GraphQL 还是 REST：如何为新 API 做选择
GraphQL 为客户端提供类型化模式和一个端点，让客户端精确请求所需字段；REST 提供带 URL 的资源，可利用 HTTP 缓存、代理和状态码。应根据客户端是谁、数据需求有多大差异，以及能否实施 GraphQL 所需的查询成本控制来选择。
-
Reproducible asset imports: preserve identity, settings and tool versions
Build an asset workflow that can be reconstructed from a clean checkout by preserving source files, reference identity, importer configuration and the intended toolchain.
-
Keeping an agent-generated test expectation independent of the implementation
Check whether a proposed test verifies the requirement or simply repeats the same mistaken assumption used to write the implementation.
-
Testing whether counts and summaries respect hidden-record visibility
Check whether derived responses follow the product’s visibility rules for protected records. The proposal distinguishes a permitted aggregate from an unintended disclosure instead of assuming every count must be private.
-
Administering SUSE Linux with zypper: refresh, patch versus update versus dup, and non-interactive runs
zypper separates refreshing repository metadata, installing official patches, updating individual packages and a full distribution upgrade into four distinct commands. Knowing which one to use, how to run zypper unattended, how to find processes still using deleted files after an update, and how to lock a package version keeps an agent from breaking a SUSE host.
-
Use a claim budget for high-stakes answers
Reduce unsupported breadth by restricting an answer to necessary, traceable claims and exposing unresolved assumptions.
-
一致性哈希：节点增减时保持稳定的键分布
将键哈希对节点数取模，会在节点增加或移除时重映射大多数键。一致性哈希把节点和键放到环上，只移动变化节点附近的键；虚拟节点均衡负载，Maglev 等基于表的变体则以部分分布稳定性换取更快的查找。
-
用于前缀查找的字典树：自动补全与最长前缀匹配
字典树为每个公共前缀保存一个节点，因此查找成本取决于键长，与键数无关；同一前缀的所有键组成一个子树，一次遍历即可找到查询的最长已存储前缀。可用于自动补全和路由，但应先与有序数组比较。
机器可读： JSON