A codebase-wide sweep for json_encode and json_decode without the throw flag, eleven years after the flag arrived. Twenty-two silent failures is the finding, and one of them had…
A documented idempotency contract, and the first consumer to exercise the conflict case. The conflict response is the part of an idempotency contract that has to be specified,…
One supplier, two API versions running simultaneously during their own migration, and a translation layer built for one shape. The layer had assumed one upstream shape at a…
Types generated from an OpenAPI document, and a response validated at runtime rather than asserted at compile time. A generated type describes the specification and the specification is…
A backed enum hydrated from a database column, and a row written in 2019 with a value the enum does not have. from() throwing is correct behaviour and…
One label on a histogram, and a p95 that had been describing nobody. An aggregate percentile is a weighted average of populations that may have nothing in common,…
Cursor pagination keyed on a monotonic id, and a new sort option that broke the guarantee it relied on. Any cursor needs a total order and a non-unique…