11°

~/topics/architecture

Architecture you can verify

A diagram nobody can check is just a nice drawing.

All topics

Architecture gets documented badly because the document and the system part ways on day one. These pieces test the tools that promise to close that gap, extracting the model from a running server instead of drawing it from memory, and comparing what each one costs to keep alive.

6 pieces

Portada: A chat on Amazon Bedrock AgentCore for my blog: I broke it with 64 messages and rebuilt it with rules outside the promptArticleA chat on Amazon Bedrock AgentCore for my blog: I broke it with 64 messages and rebuilt it with rules outside the promptTutorial: LangGraph chat on Amazon Bedrock AgentCore with an S3 Knowledge Base and guardrails, tested on a 64-message chat. Costs and a local option.#AI#AWS#SecurityPortada: I measured 320 Chilean sites: half already use post-quantum cryptography, and almost none of them chose toArticleI measured 320 Chilean sites: half already use post-quantum cryptography, and almost none of them chose toI probed the 320 most visited .cl domains: 145 negotiate X25519MLKEM768 (47.7%), but only 9 of the 128 with their own infrastructure. Measured cost: 0 ms.#Post-quantum cryptography#TLS#ChilePortada: Bun rewrote itself from Zig to Rust in eleven days. I measured what they published, and what they did notArticleBun rewrote itself from Zig to Rust in eleven days. I measured what they published, and what they did notBun ported 535,000 lines from Zig to Rust and published three concrete figures: start-up, requests per second, and binary size. Version 1.3.14 was the last Zig build and 1.4.0 the first Rust one, so you can download both and measure the same thing with only the binary changing. Start-up beats it comfortably, binary size falls short, and for memory and idle CPU the announcement gives no number at all: those two I measure with nothing official to compare against.#Rust#ArquitecturaPortada: I built a public sandbox for Chile's Open Finance System, and Keycloak alone did not get thereArticleI built a public sandbox for Chile's Open Finance System, and Keycloak alone did not get thereChile has an open finance regulation and no public sandbox to test it against. I built a complete unofficial one, faithful to the Technical Annex: participant directory, bank, authorization server and requesting application, with mandatory PAR, an encrypted request object, mTLS and RAR reaching the token. Keycloak 26 covers much of it through configuration, but the consent model Chile picked does not exist in the product: it had to be written from scratch.#Seguridad#Arquitectura#ChilePortada: The seven GEO rules: I reproduced the only test that exists, then audited my own 72 pagesArticleThe seven GEO rules: I reproduced the only test that exists, then audited my own 72 pagesA Russian study tested the seven rules the GEO industry keeps repeating against 73 pages that six engines had cited, and not one survived. I rebuilt its counts and reproduced all seven p-values exactly. Then I took the detector to my own 72 pages, and there something appeared that none of the rules looks at: four different pages declaring the same entity.#SEO#GEO#StatisticsPortada: Your architecture diagram is lying: I tested both ways of writing it as codeArticleYour architecture diagram is lying: I tested both ways of writing it as codeA visual C4 editor showed up on Habr and cannot be self-hosted. I tested the two alternatives that can: the Structurizr CLI generates all three levels of a real system in 1 second from a single file; C4-PlantUML reaches the same result without installing anything, at the cost of tripling the model.#Architecture#Tools

All writing