Third-party actions pinned to a commit, and a bump pull request that a human can actually review. The bundled dist file being unreviewable is the honest part of…
A monthly report on retention that nobody read, converted into three assertions that fail. A report describes and an assertion fails, and the difference is whether anybody has…
A scheduled base image rebuild, disabled during an incident in November, restored in February. A guard and the thing it guards being disabled together is the ordinary shape…
A certificate authority that removes eleven authorized_keys files and creates one key that must not be lost. Concentrating eleven files into one key is the point of a…
December, the end of security support for 8.1, and a host running it that nothing in the deployment inventory knew about. The end-of-life date is not the story…
Every backup in one provider, and a plan that assumed the disaster would be local rather than at the provider. Ranking the failure modes is what makes this…