Backend news and engineering summaries

Deno’s entire team is joining Cloudflare to develop a shared platform based on Cloudflare Workers and Durable Objects, aiming to make distributed server development simpler. The team will stop developing a separate Deno runtime after one year of monthly bug-fix and security releases, while Deno remains open source. Deno Deploy will shut down after six months, with migration support for paying customers. JSR continues on Cloudflare, and rusty_v8 will be supported and integrated into workerd.

The article argues teams should generally start with a monolith, even when they expect to need microservices. This avoids premature operational complexity, speeds user feedback, and lets teams discover stable service boundaries. It outlines gradual extraction, replacement, and coarse-grained service options, while noting that starting with microservices may suit experienced teams and system-replacement projects.

Tailscale experienced significant uptime instability due to a 16-year-old 'WAL-Reset' bug in SQLite. Triggered by Tailscale's non-standard, aggressive manual checkpointing, the bug caused silent data corruption. After months of forensic investigation and collaboration with SQLite maintainers, the issue was identified, patched, and verified, restoring reliability and hardening Tailscale's database infrastructure.

Anthropic built Scion, an in-house source control system, and migrated its monorepo from git in five months as merged changes grew from 2,500 to over 30,000 per day. Designed for always-online agents, Scion uses server-side changesets, content-addressed caching, API-based queries, and sparse or virtualized checkouts instead of fully local repositories. Its infrastructure uses 200 times less CPU and memory, makes CI and research checkouts two orders of magnitude faster, and cuts CI CPU use by 25%. A seven-person team built it with Claude.

RFC 10008 introduces the HTTP QUERY method, providing a safe and idempotent way to perform queries that are too complex for URI encoding. Unlike POST, QUERY allows for automated retries and caching. It supports content negotiation and URI assignment for query results, bridging the gap between GET and POST while maintaining resource safety.

AI-generated rewrites of DHH’s Campfire Once from Ruby on Rails to Rust, Elixir, and Go show that coding still requires human judgment. Unspecified prompts leave compatibility, performance, memory, and failure behavior to chance, while the implementations contain concurrency and blocking-I/O issues. Benchmarks focusing only on throughput obscure trade-offs: under load, Rust delivered as little as 1% of notifications, while Elixir used 1.8GB of memory and experienced HTTP timeouts. Reliable systems require explicit constraints, failure modes, and critical analysis.

Cloudflare launched Web Search API in beta, enabling AI agents and applications to ground responses in live Internet information. It initially supports Ceramic.ai, Exa, and Linkup, each offering Zero Data Retention through Cloudflare and following verified bot crawling standards. Running through AI Gateway, requests appear in gateway logs and use provider list pricing without markup, with support for REST API, Workers AI bindings, and customer-owned provider keys.

This article provides a technical explanation for the ubiquitous equal signs observed in older email excerpts circulating on social media. The author identifies this phenomenon as an artifact of 'quoted-printable' encoding, a method used to transmit text with long lines or non-ASCII characters across mail servers that originally only supported short, 7-bit ASCII lines. The equal sign acts as a 'soft line break' indicator or as a prefix for hexadecimal character encoding. The presence of these symbols in modern views indicates a failure in the conversion process, where software intended to decode the transport format failed to account for line-ending changes (CRLF vs LF) or simply used crude search-and-replace methods instead of proper decoders. This technical debt or developer oversight leads to 'quoted unreadable' text that persists when historical archives are improperly processed for public consumption.

A commercial web product, marketyour.games, was built and deployed in C using CGI on OpenBSD with httpd and SQLite. It provides accounts, search, folders, Stripe payments, Postmark email, progressive enhancement, and no JavaScript, while compiling assets into one statically linked binary. The stack uses libcurl, libsodium, and vendored libcjson, with each request spawning a process and deployments requiring only file replacement. The author values its simplicity, security, debugging, and minimal supply chain, but notes that CGI requires custom utilities for common web tasks.

Shopify replaced its Redis-based inventory reservation system with a MySQL-powered solution using SKIP LOCKED. By optimizing index design, transactional isolation, and connection management, they eliminated overselling risks while maintaining high-throughput concurrency during peak sales. The transition leveraged shadow mode monitoring to ensure scalability and ACID compliance across critical checkout operations.

Wasp, a full-stack web framework, is transitioning from its custom DSL to TypeScript. After years of development, the team realized that a proprietary language created significant adoption barriers and maintenance challenges regarding IDE tooling. Wasp will maintain its core value—a high-level, full-stack application specification—while improving developer experience and accessibility by adopting familiar TypeScript standards.

Recent breakthroughs in quantum computing hardware and algorithms necessitate an immediate transition to post-quantum cryptography. With experts now projecting a 2029 deadline, traditional protocols like ECDSA and RSA must be replaced by quantum-resistant standards like ML-DSA and ML-KEM. Practitioners must prioritize implementation speed over complex hybrid models to mitigate imminent security risks.

The Decisions API is in public beta and evaluates text, images, or both about 10x faster than the Responses API, returning typed answers for conditions, fixed choices, or rubric scores. It uses the POST /v1/decisions endpoint and currently supports only gpt-6-luna. Its predicate, choice, and score questions support classification, routing, prioritization, and multimodal checks; responses include probabilities and, for choice and score, confidence. Input costs $0.10 per 1M tokens, with no output-token charges.

Wirewiki delivers instantaneous autocomplete for 240 million domain names by leveraging client-side prefetching and an optimized API. By utilizing in-memory tries and memory-mapped block indices on SSDs, the server achieves sub-15ms response times. This strategic architecture ensures a high-quality UX, where most requests are served within the user's keystroke time budget.

The Deno team is joining Cloudflare to simplify self-hosting Workers and Durable Objects, allowing developers to use the same primitives in more environments. Ryan Dahl and Kenton Varda explain the motivation and background behind the move, which connects Deno’s work with Cloudflare’s developer platform.

liquidslr/system-design-notes is a work-in-progress repository of study notes for System Design Interview - An Insider's Guide, Volumes 1 and 2. It organizes guidance on designing scalable distributed systems—from rate limiters, key-value stores, and URL shorteners to chat, storage, payments, and stock exchanges—across 28 chapters. Links to Pagefy and additional technical resources distinguish it by extending the book-based notes with relevant papers, architectures, and engineering references.

Caddy is a cross-platform, extensible Go server platform for HTTP/1.1, HTTP/2, and HTTP/3 that enables automatic HTTPS by default. It supports ZeroSSL and Let's Encrypt, managed local CAs, clustering, dynamic JSON/API configuration, multiple config adapters, and modular plugins. Designed without external dependencies, it can scale to hundreds of thousands of sites and remain available during certificate-related failures. Its unified configuration and application-based architecture also support running broader Go programs.

OpenAI serves ads in ChatGPT via a backend stream that injects single_advertiser_ad_unit objects. Advertising is contextually targeted and tracks user engagement through Fernet-encrypted tokens and the OAIQ tracking SDK. This system monitors click paths and merchant-side activities, enabling OpenAI to maintain a full attribution loop between conversational suggestions and conversion events.

Event-driven systems offer scalability but introduce complex challenges like schema versioning, observability hurdles, and failure management. Developers must implement distributed tracing, handle at-least-once delivery issues via dead-letter queues, ensure idempotency to prevent duplicate processing, and design for eventual consistency to manage distributed state across asynchronous architectures.

Treg is an open-source registry and proxy for agent tools, offering one token and base URL for 3,000+ endpoints across 60+ providers. It also securely shares team APIs, CLIs, and skills through server-side credential injection. With CLI, OAuth, MCP, billing, organization controls, audit logs, health checks, and self-hosting, Treg simplifies agent access while keeping secrets centralized.