A Field Guide to Schema Migration

In practice, monitoring alerts behaves differently: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. The same reasoning holds for monitoring alerts. For monitoring alerts, the constraint matters more than the feature list. Failures are usually correlated, so plan for the shared dependency.

Teams working on data pipelines usually discover this the hard way. The interesting number is not the average, it is the 99th percentile. Adding a cache in front of a slow query is a fix; fixing the query is a cure. This is most visible in data pipelines. Consider data pipelines specifically. Every abstraction you add is a place where behaviour can differ from intent.

In practice, access control behaves differently: If a metric has no owner, it will drift until it causes an incident. The cheapest optimisation is usually removing work nobody asked for. The same reasoning holds for access control. For access control, the constraint matters more than the feature list. Aggregating at write time trades flexibility for predictable read cost.

Log Analysis: Configurations should be reviewable in a diff, not only in a console. Log Analysis: The best time to add an index is before the table gets large. Log Analysis: Failures are usually correlated, so plan for the shared dependency.

Teams working on rate limiting usually discover this the hard way. Serving static bytes is the cheapest thing you can do at the edge. A schema is an interface; changing it is a migration, not an edit. This is most visible in rate limiting. Consider rate limiting specifically. Track the denominator as carefully as the numerator.

Log Analysis: If the rollback plan needs a meeting, it is not a rollback plan. Log Analysis: Small pages that stay small are easier to keep fast than large ones made fast. Log Analysis: Write the invariant down; otherwise it lives only in someone's memory.

The interesting number is not the average, it is the 99th percentile. The same reasoning holds for edge caching. For edge caching, the constraint matters more than the feature list. Adding a cache in front of a slow query is a fix; fixing the query is a cure. Teams working on edge caching usually discover this the hard way. Every abstraction you add is a place where behaviour can differ from intent.

Access Control: A design that cannot be rolled back is a design that cannot be changed safely. Access Control: Latency budgets are easier to defend when every hop has a stated ceiling. Access Control: Caching helps only until the invalidation rules become the bottleneck.

Access Control: You can often replace a coordination problem with an idempotency key. Access Control: Anything that grows without a bound will eventually hit one. Access Control: Documentation that is not tested tends to describe the previous version.

You can often replace a coordination problem with an idempotency key. That applies to monitoring alerts as well. In practice, monitoring alerts behaves differently: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. The same reasoning holds for monitoring alerts.

Choose a delivery location with the actual handoff in mind. A parcel sent to a home may be visible to other household members or left where neighbours can see it; collection points and carrier lockers can reduce that exposure when the seller and carrier offer them. Check the carrier’s rules for collection, identification and holding periods. A signature requirement can prevent an unattended drop-off, but it may also mean arranging to be present or making a separate collection trip.

Cloud Infrastructure: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to cloud infrastructure as well. In practice, cloud infrastructure behaves differently: The signal you want is often already logged, just not aggregated.

Backup Strategy: If a metric has no owner, it will drift until it causes an incident. Backup Strategy: The cheapest optimisation is usually removing work nobody asked for. Backup Strategy: Aggregating at write time trades flexibility for predictable read cost.

Data Pipelines: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. That applies to data pipelines as well. In practice, data pipelines behaves differently: Failures are usually correlated, so plan for the shared dependency.

Observability: A design that cannot be rolled back is a design that cannot be changed safely. Observability: Latency budgets are easier to defend when every hop has a stated ceiling. Observability: Caching helps only until the invalidation rules become the bottleneck.

Consider rate limiting specifically. If the rollback plan needs a meeting, it is not a rollback plan. Rate Limiting: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to rate limiting as well.

Monitoring Alerts: The interesting number is not the average, it is the 99th percentile. Monitoring Alerts: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Monitoring Alerts: Every abstraction you add is a place where behaviour can differ from intent.

The word “routine” does not mean that every infection is checked at every visit. Public-health recommendations differ by country and may also depend on age, pregnancy, local infection rates and individual circumstances. Guidance from bodies such as the US Centers for Disease Control and Prevention, the UK National Health Service and the World Health Organization can help shape local practice, but a local clinician or qualified sexual-health educator can explain what applies.

In practice, rate limiting behaves differently: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. The same reasoning holds for rate limiting. For rate limiting, the constraint matters more than the feature list. Costs usually concentrate in a small number of operations, so find those first.

Schema Migration: If a metric has no owner, it will drift until it causes an incident. Schema Migration: The cheapest optimisation is usually removing work nobody asked for. Schema Migration: Aggregating at write time trades flexibility for predictable read cost.

Edge Caching: If the rollback plan needs a meeting, it is not a rollback plan. Edge Caching: Small pages that stay small are easier to keep fast than large ones made fast. Edge Caching: Write the invariant down; otherwise it lives only in someone's memory.

Screening is designed for people who may have an infection without knowing it; many STIs cause no noticeable symptoms. If someone has symptoms or has been told they may have been exposed, that is different from routine screening and should be discussed with a clinician. A screening appointment may need to include an assessment beyond the tests usually offered to someone without symptoms.

Crawl Budget: The interesting number is not the average, it is the 99th percentile. Crawl Budget: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Crawl Budget: Every abstraction you add is a place where behaviour can differ from intent.

Consider data pipelines specifically. You can often replace a coordination problem with an idempotency key. Data Pipelines: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. That applies to data pipelines as well.