System Architecture

Defines an application's boundary with a layer of services that establishes a set of available operations and coordinates the application's response in each operation.

Every line of client-side bot detection runs on hardware the attacker fully owns. Here's the engineering philosophy we use to defend code we can never actually hide.

When to reach for a well-known URI — and the traps that catch most protocol designers.

Evolving search from monolithic services to programmable primitives for the era of agent harnesses.

By Celina Amados

By Amer Hesson, Marcelo Mayworm, James Mulcahy, and Brittany Truong

by Emily Gill

By Guil Pires, Jennifer Prince, Jose Camacho, Ken Kurzweil, Phanindra Chunduru

by Matthew Wood, Ishan Gupta, Kevin Mercurio, Devon Bryant, and Claire Dorman

You send a file, but how do you know it arrived intact? In other words, how do you know that it didn’t get cut off, garbled, or changed somehow? Simplistically, you could just add up all the …

What I thought was a scheduling problem turned out to be a portability problem first

You know the TV gameshow Play Your Cards Right? Contestants are shown a sequence – in two rows – of giant playing cards presented face-down. The host turns over the first card. The cont…

This document describes Merkle Tree certificates, a new form of X.509 certificates which integrate public logging of the certificate, in the style of Certificate Transparency. The integrated design reduces logging overhead in the face of both shorter-lived certificates and large post-quantum signature algorithms, while still achieving comparable security properties to traditional X.509 and Certificate Transparency. Merkle Tree certificates additionally admit an optional signatureless optimization, which decreases the message size by avoiding signatures altogether, at the cost of only applying to up-to-date relying parties and older certificates.

Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships.

If two copies of the same email can produce two different payloads, trust disappears fast. I walk through the normalization decisions that make inbound email parsing predictable, debuggable, and safe to build on.

I built a TCP Network Load Balancer to understand how it works. In this post we are going to discuss about the same and understand how it works under the hood.

We have been using Signals in production for years via several modern front-end frameworks like Solid, Vue, and others, but few of us are able to explain how they work internally. I wanted to dig into it, especially diving deep into the push-pull based algorithm, the core mechanism behind their reactivity.

Discover how Anthropic approaches the development of reliable AI agents. Learn about our research on agent capabilities, safety considerations, and technical framework for building trustworthy AI.

DriveNets AI fabric’s end-to-end full-stack approach to networking for AI workloads

Periodically people are seized with a desire to put complex, bulky, and/or obscurely structured data into the Domain Name System (DNS). This draft defines a kitchen sink Resource Record that will satisfy this lust by defining a new DNS resource record for the storage of miscellaneous structured information.

Releasing Town Square. Bring back the feeling that real people are browsing your site with you.

Picos already have persistent identity, owned state, and an event-driven architecture—exactly the properties that make a good substrate for AI agents. The integration path starts with a simple webhook and leads somewhere much more interesting: a world where AI works for you, reasoning over data that is stored in your picos rather than on someone else’s platform.

Cleaning up manifold-api as a prerequisite for the spring conversational interface Capstone turned into a complete platform update: Pico Engine 1.0 compatibility, automated bootstrap, centralized notifications, and a Docker-based integration test harness. Once the platform was solid, the old temperature-network had an obvious new home inside Manifold's community framework, so I rewrote it too as an example of how Manifold can be a framework for pico networks.

A rundown of seven more common mistakes is system architecture diagrams and how to fix them

Rendering an Emacs status bar as an SVG image, like with my svg-line package (demo), really is several times heavier than the native text engine. The skeptics w...

I wish there was a counter running that told me how many screenshots and screen recordings I've taken over the years, but I'm into the tens of thousands easily. As a passionate Mac screenshotter, here are my keyboard shortcuts for the Mac that I think you should copy

A random sequence in an innocuous GPS message field is likely encrypted traffic from the U.S. military's system for remotely updating cryptographic keys around the world.

AI context graph startup Jedify has raised $24 million in an A-round to further develop its bringing ...