Why Did systemd OOM-Kill My Service (and How to Stop It)
August 25, 2026
Your service vanished with no crash log because the kernel OOM killer took it. Confirm it from journalctl and dmesg, read the real memory pressure, then bound it with cgroup limits.
RNG and RTP Under Continuous Assurance: Moving From Annual Certificate to Live Monitoring
August 25, 2026
A GLI-19 certificate proves the RNG was fair on test day and says nothing about the build running tonight. How to make fairness a monitored control, not a certificate on the wall.
Reconciling DAC8, CARF and CRS 2.0: One Reporting Engine, Three Regimes
August 25, 2026
DAC8, CARF and CRS 2.0 describe the same customers three ways. A reference design for one reporting engine that collects and validates once, then branches only at output.
DAC8 Due Diligence: Self-Certification and User Onboarding Data Changes
August 25, 2026
DAC8 pushes tax-residence and TIN collection into your onboarding flow. Retrofit the data model and validation now, so users arrive reportable instead of leaving gaps to chase.
DAC8 Live: Crypto-Asset Tax Reporting From 1 January 2026 in Code
August 25, 2026
DAC8 crypto-asset reporting applies from 1 January 2026 with first exchange by 30 September 2027. A practitioner’s guide to building and validating the CARF-aligned XML report in code.
Enum, Lookup Table or Check Constraint? Modelling a Fixed Set of Values
August 25, 2026
A fixed value set can be a Postgres ENUM, a lookup table with a foreign key, or a text column with a CHECK. Compared on the day the set changes, with SQL for each.
sysctl Tuning That Earns Its Keep: Network and Kernel Settings for a Busy Server
August 25, 2026
Most sysctl optimisation lists are cargo cult. Here is a defensible /etc/sysctl.d drop-in for a busy Linux server, with why each setting exists and how to confirm it took effect.
Class A Company Obligations Under NYDFS: When Scale Triggers Independent Audit and EDR
August 25, 2026
Once headcount or revenue crosses the NYDFS Class A threshold, Part 500 adds independent audits, EDR, centralised logging and privileged-access controls that reshape security architecture and budget.
Privileged Access Management Under NYDFS: Meeting the New Access-Governance Bar
August 24, 2026
The amended NYDFS Section 500.7 pushes firms from standing admin rights toward least-privilege, just-in-time access. A reference pattern for the architecture and the review evidence a supervisor will ask for.
Spot GPUs Without Losing Work: Preemption-Safe Training and Batch Inference
August 24, 2026
Preemptible GPUs cut training and batch-inference cost by 60-90%, but only if jobs checkpoint and resume cleanly. How to make GPU workloads preemption-safe.