A Project Secret Should Not Reach Every Service
Store a secret once at project scope, then allow each service only the names it needs. A value access matrix makes rotation and review concrete.
Product updates, implementation details, and field notes on getting an app running, who may reach it, and the record the next change starts from.
Articles, shipping notes, and the thinking behind how aidrop.it works.
Store a secret once at project scope, then allow each service only the names it needs. A value access matrix makes rotation and review concrete.
A push changes a repository, not a release. Compare the local head, tracked branch, built commit and running commit before debugging the app.
A committed Dockerfile can be ignored when the deploy still uses a buildpack. Record the mode, file path and build context before changing code.
A green build and a log line do not prove a migration landed. Four SQL statements that do, and the rules an agent follows when it runs them against live data.
Stop, delete and destroy leave different things behind. What each verb keeps, why a stopped app still has an address, and a report block for your agent.
A host with no backups has told you where the copy comes from: a job in your project, dumping to storage you own. Two ways by size, and a pg_dump container.
Deploying from an agent session is fast. Give the loop three reasons to stop, name the fixes it may never make, and paste a deploy-loop block into instructions.
Every host is a contract: writable paths, disk, port, replicas, egress. Read it before your agent picks a stack, with a worksheet you can fill in for any host.
A fresh agent session reads the repository, not the running app. Six facts to read from the host first, and a block to paste into your agent instructions.