A GitOps deadlock between a new readiness probe and an old image
GitHub redirected the repository but not the GHCR coordinate, so Argo CD combined a new /ready probe with an image that could only return 404.
Reproducible failures, evidence, root causes, fixes, and regression prevention.
GitHub redirected the repository but not the GHCR coordinate, so Argo CD combined a new /ready probe with an image that could only return 404.
A Spring Security incident where an Auth0 filter chain captured every path, rejected another JWT format, and remained invisible under the test profile.
A WinError 32 portability failure caused by assuming with sqlite3.Connection closes the handle, plus UTF-8 and semantic Path fixes.
Redesigning client-IP trust across ALB and a BFF, then bounding the rate-limiter map that attacker-controlled keys could grow indefinitely.
How I isolated a RAG embedding failure to token throughput, then fixed the Jackson response contract that only appeared after rate limiting was gone.