tooling

36 posts

An auth gate you do not resent

A gate asked too often gets automated away, and one asked once never expires. Charge full authentication only for transitions that change the threat model.

10 min readsecretstooling

429 is not an error, it is a schedule

Transient and terminal failures need opposite responses and look identical. How to tell them apart, and why partial progress must be persisted before it is believed.

8 min readaitooling