Cloudflare Workers Access Can Now Be Scoped Per App
Cloudflare added resource-level roles for Workers, giving teams a cleaner way to give CI systems, teammates, and coding agents only the access one application needs.
Read note↗
Notes from the engineering bench
Technology notes
Technology notes
for people who ship.
Field notes from the A2Techify engineering team on AI, developer tools, and the systems around them.
55Field notes published
31Technology threads
0%Paywalled
Small tests. Primary sources.
Useful judgment calls.
Follow a thread
01
The journal
Recently tested,
Recently tested,
carefully explained.
Practical research on AI systems, developer tools, security, and the infrastructure that makes them useful.
GitHub Advanced Security Configurations Can Now Be Enforced
GitHub enterprise administrators can now enforce Advanced Security configurations against both repository and organization owners, closing a practical policy gap for large teams.
GitHub Copilot Auto Gets Cost And Quality Tiers
GitHub Copilot auto model selection now has efficiency, balance, and intelligence tiers, giving teams a practical way to steer cost, latency, and quality without picking a model for...
GitHub Copilot Code Review Gets Closer to Real CI
GitHub Copilot code review now uses broader shell tools and an ensemble of agents in Lite reviews, which makes AI review more useful but also worth treating like...
Cloudflare 1.1.1.1 Makes Post-Quantum DNSSEC Practical to Test
Cloudflare's 1.1.1.1 resolver now validates ML-DSA-44 DNSSEC signatures, exposing the real migration work: large packets, TCP fallback, downgrade policy, and parent-chain adoption.
OpenAI Habitat Shows Why Storage APIs Should Be Boring
OpenAI's Habitat storage platform is a useful reminder that predictable APIs, event-loop telemetry, and controlled escape hatches matter more than expressive queries on hot paths.
GitHub Actions Cache Mode Makes CI Caches Less Trusting
GitHub Actions cache-mode is now generally available, giving workflows and jobs explicit read, write, write-only, or no-cache access so teams can reduce cache-poisoning risk.
Cloudflare Workers Gets Closer To Real Node Module Semantics
Cloudflare rebuilt the Workers module registry around URL-based resolution, lazy compilation, shared code caches, import.meta support, and better Node.js compatibility.
Cloudflare Automatic Key Exchange Makes Post-Quantum Origin TLS Less Manual
Cloudflare's Automatic Key Exchange measures each origin's TLS 1.3 key agreement support, then leads with the strongest safe key share, including X25519MLKEM768 where origins support it.
VS Code Agent Merge Turns PR Cleanup Into An Agent Loop
VS Code 1.136 adds Agent Merge in preview, giving coding agents a narrower loop for review feedback, failing checks, stale branches, and merge conflicts.
02
How we work
Less hype.
Less hype.
More signal.
We test new technology in the same way we would evaluate it for a real project: run it, inspect the trade-offs, and keep the parts that hold up.
- 01Run itStart with a small, reproducible test.
- 02Pressure-test itInspect the cost, security, and operational limits.
- 03Write it downShare the commands, code, and judgment calls.