Field Signal · Curated Reading
The Engineering
Signal.
High-signal field notes, architecture teardowns, and engineering writing from 50 publications. A focused reading queue for becoming a stronger end-to-end engineer. Updated 19 Aug.
LLMOps and platform engineering: Who should own the AI pipeline?
A few years ago, getting a model into production meant a data scientist, a DevOps engineer, and a narrow set of tools: train it, test it, ship it, watch the dashboards. Large language models broke that...
Reducing Text2SQL latency with parameterized query templates
Learn how parameterized query templates reduced Text2SQL latency by 80% and cut token consumption by over 50%. This post covers the architecture behind an intelligent caching layer that uses semantic similarity to match user questions to SQL templates, bypassing expensive LLM calls.
Adobe Firefly: Simplified observability with Amazon Managed Prometheus
Learn how Adobe Firefly achieved 28x faster GPU metric queries by migrating from self-managed Prometheus to Amazon Managed Service for Prometheus, with improvements in query performance, infrastructure reliability, and operational efficiency.
How I built a demo generator with GitLab Duo Agent Platform
A demo used to take me days to build — screenshots, narration, stitching it together in an external tool, chasing feedback — and every time the feature changed I'd have to start over. A few months ago, I handed most of that to an agent in GitLab Duo Agent Platform. GitLab Duo Agent Platform is built...
How we tracked down a 16-year-old SQLite bug
SQLite corruption? Sorted.
How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
WhatsApp is committed to helping people stay safe while protecting the privacy of their messages. As scam tactics evolve — from impersonation to social engineering to AI-generated lures — we’re always evolving as well, so that our protections stay ahead of scammers while protecting people’s pe...
Good apps aren’t born, they’re guided: Building observable policy as code
As parents in tech, we’ve learned that neither children nor applications thrive without clear boundaries. There are no “good” or “bad” kids, just as there are no inherently “good” or “bad” applications, only behaviors shaped by...
Advancing AI model interoperability with Docker and ModelPack
The rise in the number of tools available for creating and running AI content has lowered the barrier of entry and offered the flexibility of choice when choosing the appropriate solution for a given use case....
How GitLab tracks vulnerabilities through refactors and reformatting
Every day, security scans face the same problem: an agent or a developer adds a comment, reformats a file, or moves a function, and a naive vulnerability tracker suddenly reports the same finding twice. Security teams end up re-triaging issues they already dismissed, which causes futile auditing eff...
GitLab Patch Release: 19.2.2, 19.1.4, 19.0.6
Open the source for the full engineering note.
A sandbox is only as closed as what an AI agent can reach
In July, OpenAI and Hugging Face responsibly disclosed an OpenAI model under internal evaluation escaped its sandbox, reached the open internet, and accessed Hugging Face’s internal production infrastructure. The agent took datasets, cluster details, and cloud keys during the intrusion. The most cri...
Avoid Azure secret rotation with secretless authentication
Learn how secretless authentication for Datadog’s Azure integration helps prevent telemetry interruptions that result from expired client secrets.
Scaling patterns for self-organizing multi-agent clusters with Kiro
Learn how to coordinate AI agents through shared state in Amazon S3 instead of a central orchestrator. Deploy and observe self-organizing agent clusters on Amazon EC2 with the open-source kiro-flock reference implementation.
How to Pretty-Print Your Kubernetes YAML as KYAML and Why You'd Want To
YAML has been the standard way to write Kubernetes manifests for years. Every example, tutorial, and configuration file you come across is written in it. The problem isn't that YAML is a bad format. It's that YAML gives you a lot of choices, and not all of them are equally good for writing Kubernete...
Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave
In the first half of 2026, Cloudflare detected a 519% surge in hyper-volumetric DDos attacks across its network. These attacks were driven heavily by DNS and CLDAP reflection vectors. This report breaks down how major geopolitical conflicts reshaped the global cyber threat landscape.
A practical guide to solving when zero+zero=two in mesh observability
A Service Mesh like Istio, together with Kiali gives you a lot on day one. You install the mesh, point Prometheus at it, and suddenly you have request rate, latency, error rate, and a fairly good...
How we improved APM Java startup by encoding a prefix trie as a JVM constant
Learn how the Datadog APM team improved Java startup performance by encoding a prefix trie as a JVM string constant.
Investigate account-level churn risk with Product Analytics account segments
Learn how Product Analytics account segments combine business context and product behavior to identify accounts that may be at risk of churn.
Learning Cloud-Native Engineering Beyond Tutorials Through LFX
I joined the LFX mentorship expecting to spend three months writing documentation. A few weeks later, I was deploying OpenTelemetry Collectors across AWS EC2 instances, debugging networking problems between machines, and trying to understand why a...
Using the GitHub Copilot SDK for Java
Enterprise Java developers have a new superpower—drive GitHub Copilot from idiomatic Java code with annotations, virtual threads, and more. The post Using the GitHub Copilot SDK for Java appeared first on The GitHub Blog .
Everything we launched during Agents Week
Our latest Agents Week has come to a close. Here’s a recap of all the announcements we made from Wallets to Radar.
Serving the most critical missions: Cloudflare for Government achieves FedRAMP Class D (High) Certified status
Cloudflare for Government achieves FedRAMP Class D (High) Certified status. We also announce our commitment to pursue DoD IL4 authorization. Cloudflare brings world-class security, performance, and developer products to the public sector.
How to manage risk from unfixed Kubernetes CVEs
Learn how to confirm whether your cluster is exposed to unfixed Kubernetes CVEs and build detection queries using Kubernetes audit logs.
Instrument serverless apps with agentic onboarding
Use Datadog agentic onboarding to instrument AWS Lambda, Google Cloud Run, and Azure Container Apps from an AI assistant or CLI.
Unveiling good and bad behaviors on the Agentic Internet
Cloudflare is shifting bot mitigation from point-in-time Risk assessment to continuous Trust evaluation. Learn how new good and bad behaviors from bots and agents are assessed by our systems, including BotBase and Precursor — and try out our Precursor Trace simulation to see how your own cursor move...