Targeted Rebuilds Beat Full Recomputes—If You Can Prove Them Safe
Cloudflare cut DNS Zone Builder peak memory by 85% by planning the smallest safe rebuild, merging queued work, and proving targeted output against full recomputation.
Read note↗
Notes from the engineering bench
Technology notes
Technology notes
for people who ship.
Field notes from the A2Techify engineering team on AI, developer tools, and the systems around them.
55Field notes published
31Technology threads
0%Paywalled
Small tests. Primary sources.
Useful judgment calls.
Follow a thread
01
The journal
Recently tested,
Recently tested,
carefully explained.
Practical research on AI systems, developer tools, security, and the infrastructure that makes them useful.
The eMudhra CA Compromise Is a Runtime Patch Problem
Eight eMudhra intermediate CA keys were recoverable from public certificates. Browsers moved quickly, but runtimes, containers, proxies, and embedded clients need explicit trust-store updates and tests.
Chrome DevTools MCP 1.12 Can Reload Agent Browser Policy Live
Chrome DevTools MCP 1.12 can reload URL restrictions and tool settings without a restart, while adding offline heap analysis and parallel page-scoped work.
Cloudflare's Brotli WAF Rules Start in Log Mode for a Reason
Cloudflare added emergency WAF detections for Brotli request bodies and the Next.js image endpoint, but operators should audit inherited overrides before changing either rule from Log to Block....
GitHub's Package Firewall Adds an Install-Time Gate for npm
GitHub's package firewall can hold back new npm releases, block known malware and vulnerabilities, and flag supply-chain regressions before agents or CI install them.
llama.cpp v0.7.0 Adds a GPU Cache for CPU-Offloaded MoE Experts
llama.cpp v0.7.0 can cache frequently used MoE experts on the GPU while keeping the full expert set in system memory.
LFM2.5-24B-A2B Brings Faster Reasoning Agents to Local Hardware
Liquid AI's open-weight LFM2.5-24B-A2B activates 2B of its 24B parameters per token, supports tool use, and ships in formats for local agent runtimes.
GitHub AI Scan Expands Pull Request Security Coverage, but It Won't Block Merges
GitHub AI Scan now checks pull request changes in PHP, Bash, Terraform, Dockerfiles, and other gaps in CodeQL coverage, with advisory findings and separate AI-credit billing.
Copilot CLI Local Model Discovery Makes BYOK Less Awkward
GitHub Copilot CLI can now discover supported Ollama models from the model picker, but local model routing still needs clear privacy and capability checks.
Protected Quick Tunnels Make Agent Previews Less Risky
Cloudflare added free email protection to accountless Quick Tunnels, giving local agent previews a lightweight access gate without creating a Cloudflare app.
02
How we work
Less hype.
Less hype.
More signal.
We test new technology in the same way we would evaluate it for a real project: run it, inspect the trade-offs, and keep the parts that hold up.
- 01Run itStart with a small, reproducible test.
- 02Pressure-test itInspect the cost, security, and operational limits.
- 03Write it downShare the commands, code, and judgment calls.