Understanding Technology Fundamentals 6: Costs, Limits and Trade-offs

A design that cannot be rolled back is a design that cannot be changed safely. The same reasoning holds for queue design. For queue design, the constraint matters more than the feature list. Latency budgets are easier to defend when every hop has a stated ceiling. Teams working on queue design usually discover this the hard way. Caching helps only until the invalidation rules become the bottleneck.

Teams working on crawl budget usually discover this the hard way. You can often replace a coordination problem with an idempotency key. Anything that grows without a bound will eventually hit one. This is most visible in crawl budget. Consider crawl budget specifically. Documentation that is not tested tends to describe the previous version.

Crawl Budget: Periodic jobs should be safe to run twice, because they will be. Crawl Budget: You rarely need a new component to fix a boundary problem. Crawl Budget: The signal you want is often already logged, just not aggregated.

Consider access control specifically. A design that cannot be rolled back is a design that cannot be changed safely. Access Control: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. That applies to access control as well.

Content Delivery: You can often replace a coordination problem with an idempotency key. Content Delivery: Anything that grows without a bound will eventually hit one. Content Delivery: Documentation that is not tested tends to describe the previous version.

For cost controls, the constraint matters more than the feature list. If a metric has no owner, it will drift until it causes an incident. Teams working on cost controls usually discover this the hard way. The cheapest optimisation is usually removing work nobody asked for. Aggregating at write time trades flexibility for predictable read cost. This is most visible in cost controls.

Blood tests may be offered for HIV and syphilis. Tests for hepatitis B or C may be recommended based on vaccination, health history, exposure and national guidance. There is no universal panel that includes every STI. For example, routine herpes blood testing is not generally recommended for everyone without symptoms in many guidelines, because results can be difficult to interpret. Ask which infections each test covers and whether a negative result could be affected by how recently an exposure occurred.

Schema Migration: Configurations should be reviewable in a diff, not only in a console. Schema Migration: The best time to add an index is before the table gets large. Schema Migration: Failures are usually correlated, so plan for the shared dependency.

Routine sexual-health screening is a preventive check for sexually transmitted infections (STIs), often offered to people who have no symptoms. It may include a discussion of sexual history and one or more tests, but there is no single panel used everywhere. The tests recommended depend on a person’s health, the kinds of sexual contact they have had, timing, pregnancy status and local guidance.

A useful way to think about consent is that it should be voluntary, informed, specific and ongoing. “Voluntary” means a person is choosing without force, threats or pressure that undermines their choice. “Informed” means they understand what they are agreeing to. Specificity means the agreement applies to what was actually discussed, not to a broader assumption. These are educational principles; the precise legal test depends on local law.

In practice, log analysis behaves differently: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. The same reasoning holds for log analysis. For log analysis, the constraint matters more than the feature list. Costs usually concentrate in a small number of operations, so find those first.

The first thing to settle is the failure mode, not the happy path. This is most visible in cost controls. Consider cost controls specifically. Measurements taken once are anecdotes; you need a baseline that repeats. Cost Controls: Costs usually concentrate in a small number of operations, so find those first.

Storage Tiers: A design that cannot be rolled back is a design that cannot be changed safely. Storage Tiers: Latency budgets are easier to defend when every hop has a stated ceiling. Storage Tiers: Caching helps only until the invalidation rules become the bottleneck.

You can often replace a coordination problem with an idempotency key. The same reasoning holds for rate limiting. For rate limiting, the constraint matters more than the feature list. Anything that grows without a bound will eventually hit one. Teams working on rate limiting usually discover this the hard way. Documentation that is not tested tends to describe the previous version.

Consider storage tiers specifically. You can often replace a coordination problem with an idempotency key. Storage Tiers: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. That applies to storage tiers as well.

Queue Design: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to queue design as well. In practice, queue design behaves differently: The signal you want is often already logged, just not aggregated.

A yes is meaningful when a person can choose freely. Pressure can take many forms: repeated requests after a refusal, threats, guilt, intimidation, or using a position of authority to influence someone. A person who agrees because they fear consequences or feel unable to refuse may not be making a free choice.

Data Pipelines: Periodic jobs should be safe to run twice, because they will be. Data Pipelines: You rarely need a new component to fix a boundary problem. Data Pipelines: The signal you want is often already logged, just not aggregated.

Observability: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to observability as well. In practice, observability behaves differently: The signal you want is often already logged, just not aggregated.

If the rollback plan needs a meeting, it is not a rollback plan. That applies to access control as well. In practice, access control behaves differently: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. The same reasoning holds for access control.

A queue smooths spikes but also hides how far behind you are. This is most visible in release process. Consider release process specifically. Retries without jitter turn a small outage into a large one. Release Process: Separating the reads from the writes buys room to change either side.

In practice, load balancing behaves differently: If a metric has no owner, it will drift until it causes an incident. The cheapest optimisation is usually removing work nobody asked for. The same reasoning holds for load balancing. For load balancing, the constraint matters more than the feature list. Aggregating at write time trades flexibility for predictable read cost.

Consider queue design specifically. The interesting number is not the average, it is the 99th percentile. Queue Design: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. That applies to queue design as well.

For queue design, the constraint matters more than the feature list. A queue smooths spikes but also hides how far behind you are. Teams working on queue design usually discover this the hard way. Retries without jitter turn a small outage into a large one. Separating the reads from the writes buys room to change either side. This is most visible in queue design.