Concepts
Mental models and definitions that make the code understandable.
896 published
Page 1 of 9
Access Token Audience Binding
Audience binding restricts a token to the resource server it was minted for, preventing a token issued for service A from being replayed against service B in a shared token pool.
Actor Mailbox Bounds
Actor Mailbox Bounds governs mailbox overflow, shaping system behavior under specific failure modes and workloads.
Adaptive Cardinality Estimation
Adaptive cardinality estimation corrects the optimizer row-count guesses at runtime by observing actual output sizes, so that a plan chosen on stale statistics can re-optimize mid-execution when.
Adaptive Concurrency Limits
Adaptive concurrency limits tune the in-flight request cap to the observed goodput, so the system pushes as hard as it can without sliding into the latency cliff where backpressure collapses.
Adaptive Sampling Strategies
Adaptive sampling varies the sampling rate by the value of the data — sampling errors and slow spans heavily, healthy traffic lightly — so the retained set is informative within a fixed budget.
Aggregate Boundary Design
Aggregate Boundary Design governs consistency scope, shaping system behavior under specific failure modes and workloads.
Alert Routing Design
Alert routing design directs each alert to the on-call team that owns the affected service, so the alert reaches the team that can fix it rather than a default queue where it is ignored.
Allocation Pressure Reduction
Allocation pressure reduction minimizes object creation on the hot path, so the GC sees fewer allocations and pauses less, trading programmer convenience for latency predictability.
Ambient Authority
Ambient authority grants permissions by the running process identity rather than the requested operation, making every call maximally privileged and every bug a potential escalation.
Anchor Positioning
Anchor Positioning governs relative positioning, shaping system behavior under specific failure modes and workloads.
Anonymous Test Objects
Anonymous Test Objects governs minimal test data, shaping system behavior under specific failure modes and workloads.
Anti-Corruption Boundary Translation
An anti-corruption boundary translates between a legacy or external model and your bounded context, so the foreign model concepts never leak into your domain language and you can evolve independently.
ACL in DDD
ACL in DDD governs translation isolation, shaping system behavior under specific failure modes and workloads.
Anti-Entropy Repair
Anti-Entropy Repair governs replica divergence correction, shaping system behavior under specific failure modes and workloads.
Anti-Join Optimization
An anti-join returns rows from the left input that have no match in the right, and optimizing it means avoiding the naive nested-loop that scans the right side once per left row.
API Error Contract
An API error contract standardizes the error response shape — code, message, details, trace ID — so the client can programmatically branch on the code and the operator can trace the instance.
API Fingerprinting Defense
API fingerprinting identifies the server implementation by its behavior on edge-case inputs; defending means normalizing responses so the implementation does not leak through error formats.
API Pagination Strategy
API pagination strategy chooses between offset, cursor, and keyset pagination so the client can iterate a large collection without skipping or duplicating rows as the collection changes under it.
API Rate Limit Budget
An API rate limit budget allocates a per-client request allowance over a window, so a single client cannot consume the shared capacity and the budget enforces fair use without per-request overhead.
App Attestation Integrity
App attestation cryptographically proves to a server that the client is a genuine, unmodified build of the expected app, blocking modified clients and replayed tokens from tampered devices.
Assertion Roulette Anti-Pattern
Assertion roulette is a test smell where a test contains many assertions of equal weight, so a failure reports the first to trip without indicating which matters, hiding the real defect behind an.
Async Stack Trace Reconstruction
Async stack trace reconstruction links the frames across promise continuations and callback hops so an error in an async function points at the originating call, not at an anonymous tick in the.
Async Task Composition
Async Task Composition governs task chaining, shaping system behavior under specific failure modes and workloads.
Attestation Policy Evaluation
Attestation policies encode the conditions under which a verified claim is sufficient to grant access, turning raw attestation evidence into a decision by comparing measured values against.
Attribute-Based Encryption
Attribute-based encryption keys ciphertext to access policies over attributes, so decryption succeeds only when the recipient attributes satisfy the policy — embedding authorization into the.
Autovacuum Threshold Tuning
Autovacuum Threshold Tuning governs scale-free cleanup, shaping system behavior under specific failure modes and workloads.
Availability Budget Reset
Availability Budget Reset governs budget accounting over cycles, shaping system behavior under specific failure modes and workloads.
Backpressure Service Design
Backpressure service design makes a service propagate overload upstream rather than queue unboundedly, so the system degrades by shedding load instead of piling latency until everything collapses.
Barrier Synchronization
A barrier is a synchronization point at which every participant must arrive before any proceeds, used to separate phases of a parallel computation so no phase reads half-written state from the next.
Batched Backfill Strategy
Batched Backfill Strategy governs incremental backfill, shaping system behavior under specific failure modes and workloads.
BBR Tuning
BBR Tuning governs congestion control optimization, shaping system behavior under specific failure modes and workloads.
Behavioral Pinning Tests
Behavioral pinning records the observable outputs of a system under a fixed input set and fails on change, turning unintended behavior drift into a visible regression rather than a silent.
Benchmark Variance Reduction
Benchmark variance reduction controls the noise sources — CPU frequency scaling, thermal throttling, scheduler interference — that make a single benchmark run unrepeatable and a comparison.
Bitmap Index Encoding
A bitmap index stores one bit per row per distinct value, making equality predicates on low-cardinality columns a bitwise AND that is faster than a B-tree lookup and compresses well.
Blind Signature Schemes
Blind signatures let a signer sign a message without seeing its content, enabling anonymous credentials and e-cash where the issuer authenticates validity without linking the signed value to the.
Bloat Reclamation
Bloat Reclamation governs space reclamation, shaping system behavior under specific failure modes and workloads.
Bloom Join Acceleration
A bloom join builds a Bloom filter of the join keys on the smaller side and probes it on the larger side before the shuffle, so that non-matching rows are filtered out before the network transfer.
Blue-Green Traffic Switch
A blue-green traffic switch flips the router from the blue environment to green in one step, so the new version is live with no in-place upgrade and rollback is a router flip back.
Bounded Context Identification
Bounded context identification finds the seams where a single domain model must split because the same word means different things to different teams, preventing a monolithic model that serves no.
Bounded Queue Backpressure
A bounded queue applies backpressure by blocking or rejecting producers when full, so that a slow consumer cannot drive the producer to exhaust memory by buffering an unbounded backlog.
Branch Prediction Friendly Code
Branch prediction friendly code arranges the hot path so the conditional branches are highly predictable, avoiding misprediction pipeline flushes that cost tens of cycles per branch.
Browser Fingerprinting Mitigation
Browser fingerprinting identifies a user across sessions by combining stable attributes — headers, fonts, canvas rendering — without cookies; mitigation reduces the entropy of these observable.
Buffer Pool Tuning
Buffer pool tuning sizes the in-memory cache of database pages so that the working set fits and the read path serves from memory, while leaving room for the OS page cache and other allocations.
Builder vs Fixture
Builder vs Fixture governs test data design styles, shaping system behavior under specific failure modes and workloads.
Bulkhead Isolation
Bulkhead isolation partitions resources — thread pools, connections, memory — per tenant or per dependency, so a failure or overload in one partition cannot exhaust the resources of the others.
Multi-Window Burn Rate
Multi-Window Burn Rate governs fast and slow burn detection, shaping system behavior under specific failure modes and workloads.
Cache Invalidation Strategy
Cache invalidation strategy decides when a cached value is no longer valid — TTL, event-driven, version-keyed — so the cache serves fresh data without becoming a correctness liability.
Cache Warming Strategy
Cache warming pre-populates the cache with the working set before traffic arrives, so the first requests see a warm cache and the cold-start spike does not hammer the backing store.
Canary Analysis Strategy
Canary analysis compares the metrics of a small canary cohort against the baseline, so a regression is detected at 1% before it reaches 100% and the rollout auto-halts.
Capability-Based Security
Capability security grants authority by handing the caller an unforgeable reference to a specific resource, so authority is bounded by what you hold, not by who you are or what process you run in.
Capacity Planning Model
A capacity planning model projects the workload against the resource ceiling with margin for growth and burst, so a capacity decision is a forecast, not a guess made when the system is already slow.
Capture-Replay Testing
Capture-replay testing records production traffic and replays it against a candidate build, testing real-world input distributions without the labor of synthesizing representative fixtures by hand.
Telemetry Cardinality Control
Telemetry cardinality control bounds the number of distinct label combinations, so a high-cardinality dimension does not explode storage and make the metric unreadable as one line per value.
Cell-Based Architecture
Cell-based architecture groups a service and its dependencies into a self-contained cell with its own data and routing, so that a cell failure is contained and a cell deployment is independent of.
Cert Pinning Mobile
Cert Pinning Mobile governs MITM prevention on mobile, shaping system behavior under specific failure modes and workloads.
CT Monitor
CT Monitor governs mis-issuance detection, shaping system behavior under specific failure modes and workloads.
Certificate Transparency
Certificate transparency appends every publicly trusted certificate to an append-only public log, so a misissued certificate is detectable by the domain owner rather than remaining trusted until.
Change Data Capture Pattern
Change data capture streams every row mutation as an event by reading the transaction log, so downstream systems see changes in order without polling the source table.
Channel Backpressure Go
Channel Backpressure Go governs bounded channels, shaping system behavior under specific failure modes and workloads.
Checkpoint-Restart Recovery
Checkpoint-restart periodically persists the progress of a long-running job so that a failure resumes from the last checkpoint rather than restarting from the beginning.
Circuit Breaker Tuning
Circuit breaker tuning sets the failure threshold, open duration, and half-open probe count so the breaker trips on real outages, not on a blip, and recovers without hammering the recovering service.
Closure of Operations
Closure of operations means an operation on a value of a type returns a value of the same type, enabling composition and chaining without type-casing at every step.
CLS Layout Stability
CLS Layout Stability governs visual stability, shaping system behavior under specific failure modes and workloads.
Command-Query Responsibility Allocation
CQRS allocates the command (write) and query (read) sides to separate models, so each can be optimized for its workload without forcing one model to serve both a normalized write and a.
Composite Application Pattern
A composite application assembles independent capabilities into a user-facing experience through composition rather than a monolith, so each capability can be built, deployed, and evolved by a.
Conceptual Model Design
A conceptual model captures the essential entities and relationships of a domain in a form the domain experts validate, serving as the bridge between their language and the implementation model.
Conditional Request Caching
Conditional request caching sends a validator — ETag or Last-Modified — so the server can return 304 Not Modified when the representation is unchanged, transferring zero body bytes.
Conformance Testing
Conformance testing checks an implementation against a written standard, so that compliance with the spec is a pass/fail property rather than a matter of interpretive reading by each implementer.
Conformist Relationship
Conformist Relationship governs upstream compliance, shaping system behavior under specific failure modes and workloads.
Connection Migration QUIC
Connection Migration QUIC governs IP change resilience, shaping system behavior under specific failure modes and workloads.
Connection Pool Sizing
Connection pool sizing sets the min, max, and acquire timeout so the pool serves peak concurrency without exhausting the database, and a spike waits rather than opening unbounded connections.
Constant-Time Cryptography
Constant-time implementations make execution time and memory access pattern independent of secret values, eliminating the timing side channel that leaks keys one bit at a time through measurement.
Container Style Queries
Container Style Queries governs parent style response, shaping system behavior under specific failure modes and workloads.
Content Encoding Negotiation
Content encoding negotiation lets the client advertise accepted encodings (gzip, br, zstd) so the server picks the best compression, trading CPU for transfer size per the client capability.
Content-Visibility Rendering
The content-visibility CSS property lets the browser skip rendering work for off-screen content, so a long page paints the visible portion fast and defers the rest until scrolled into view.
Context Map Patterns
Context Map Patterns governs bounded context relationships, shaping system behavior under specific failure modes and workloads.
Context Mapping Strategies
Context mapping documents the relationships between bounded contexts — shared kernel, customer-supplier, conformist — so that the integration patterns are explicit and the teams know who depends.
Continuity Testing
Continuity testing exercises the recovery path — failover, restore, runbook — under controlled conditions, so that the recovery works when called on at 3 a.m. because it has been called on.
Cooperative Cancellation Token
Cooperative Cancellation Token governs graceful cancellation, shaping system behavior under specific failure modes and workloads.
Cooperative Multitasking
Cooperative multitasking yields control at explicit points rather than being preempted, so a task that never yields freezes the system — simpler than preemptive but unsafe with untrusted code.
Coroutine Stack Layout
A coroutine stack layout determines how the coroutine suspends and resumes its frame — segmented stacks grow on demand, pool stacks avoid allocation — trading memory for suspension speed.
Cosign Keyless Signing
Cosign Keyless Signing governs OIDC based signing, shaping system behavior under specific failure modes and workloads.
Covering Index Design
A covering index includes every column the query reads, so the engine satisfies the query from the index alone without a heap fetch, turning a table scan into an index-only scan.
CPU Cache Locality
CPU cache locality arranges data access so the working set fits in cache and access is sequential, turning a 100x cache-miss penalty into a 1x cache-hit on the hot path.
Critical Resource Chains
Critical Resource Chains governs dependency chains, shaping system behavior under specific failure modes and workloads.
Cross-Tenant Data Leakage
Cross-tenant leakage occurs when a multi-tenant system returns or exposes data belonging to a different tenant, the canonical SaaS failure where isolation breaks at the data layer rather than the.
CSS Containment
CSS containment declares that an element subtree is independent of the rest of the document, so the browser can skip reflowing or repainting outside the subtree when it changes.
CT Log Inclusion
CT Log Inclusion governs certificate auditability, shaping system behavior under specific failure modes and workloads.
CUBIC vs BBR
CUBIC vs BBR governs congestion control selection, shaping system behavior under specific failure modes and workloads.
Curve25519 Key Agreement
Curve25519 is a carefully chosen elliptic curve for Diffie-Hellman key agreement whose constant-time Montgomery ladder avoids the implementation pitfalls that plague shorter-Weierstrass-curve.
Customer-Supplier Relationship
Customer-Supplier Relationship governs team dependency, shaping system behavior under specific failure modes and workloads.
Dashboard Latency Budget
A dashboard latency budget caps the query time behind a dashboard panel, so the operator sees data in seconds and the panel does not hang on a query that scans a week of data at every refresh.
Data Contract Versioning
Data contract versioning governs the evolution of the schema a producer and consumer agree on, so a producer can add a field without breaking consumers and a removal is a negotiated, versioned change.
Data Distribution Shift
A data distribution shift is the change in the input distribution between training and production, so a model that scored well in lab degrades because the real data no longer matches the data it.
Data Exfiltration Detection
Data exfiltration detection identifies the unauthorized transfer of sensitive data out of a network by modeling normal egress patterns and flagging anomalies in volume, destination, or timing.
Data Masking Policies
Data masking replaces sensitive fields with structurally consistent non-sensitive substitutes, so non-production environments and least-privilege views receive usable data without exposing the.
Data Mesh Governance
Data mesh governance decentralizes ownership to domains that publish data as products with contracts, so the platform provides the infrastructure and the domains own the schema, quality, and SLOs.
Data Quality Monitoring
Data quality monitoring continuously checks the dimensions — completeness, consistency, timeliness, accuracy — that the data contract specifies, so a quality regression is detected before it.
Data Race Detection
Data race detection finds two concurrent accesses to the same location where at least one is a write, the bug class that produces nondeterministic corruption that only surfaces under specific.
Deadlock Avoidance
Deadlock avoidance structures lock acquisition so the circular-wait condition cannot arise — by a global lock ordering, by lock timeouts, or by acquiring all locks atomically up front.