Tagged infrastructure
3 pieces
- · 9 min read
A Queue That Fails Safe
When software controls a physical queue of people, a failure has consequences that are not data consequences. Offline-first operation at the counter, where each terminal keeps issuing from a local ledger and reconciles when connectivity returns, matters more than any feature of the central system. The dangerous failure is the recovery surge, when everything queued during an outage releases at once.
- · 7 min read
Desired State: How Fleet Systems Made Double Execution Impossible
Infrastructure engineering solved a problem AI agents are currently rediscovering. Declaring the state you want, rather than the action you want taken, makes repeating an operation harmless by construction. The interesting part is not the idea. It is exactly which properties do the work, because two of the three are usually missing when people borrow the pattern.
- · 7 min read
Fleet Scale Changes the Failure Mode, Not Just the Number
A platform that works at a hundred nodes and fails at twenty-five thousand did not run out of capacity. It met failures that do not exist at small scale: monitoring that damages what it monitors, silence that no poller notices, and heterogeneity that only appears once the sample is large enough to contain it.