1. Offline-First advanced

    Delivery couriers work in areas with intermittent connectivity and must complete jobs regardless. What does offline-first require beyond local caching?

    2 min answer offline-firstsyncqueueconflict
  2. Offline-First advanced

    You are designing a field-service application for engineers who work in basements and rural sites with no reliable connectivity. What is the architecture, and what are the decisions that will bite later?

    3 min answer offlinemobilesyncconflict-resolution
  3. OTA Updates advanced

    A connected-vehicle fleet needs over-the-air firmware updates. What must the architecture guarantee, and why is this unlike a server deployment?

    2 min answer atherotafirmwarerollback
  4. OTA Updates advanced

    A firmware update bricked 4% of a deployed fleet. Each recovery requires a site visit. What went wrong and what prevents recurrence?

    2 min answer iotdeploymentresilience
  5. OTA Updates advanced

    A staged over-the-air rollout reaches 100% over two weeks. What happens to the 12% of devices that were offline for the whole window and come back three weeks later on the old firmware?

    3 min answer otaversion-skewdesired-statefleet
  6. OTA Updates advanced

    An OTA firmware update has bricked 3% of a 50,000-device fleet. What do you do, and what should have prevented it?

    1 min answer iototaincidentrollout
  7. OTA Updates advanced

    Design over-the-air updates for devices where a failed update means a physical service visit.

    2 min answer otaupdatesrollbackstaged-rollout
  8. Physical-World Failure Modes advanced

    A logistics platform's software is correct and the operation still fails regularly. What failure modes does software architecture usually ignore?

    2 min answer physical-worldfailure-modeshuman-factorsdegradation
  9. Physical-World Failure Modes advanced

    A logistics system's software is correct and operations still fail. What class of failure is this, and how should the architecture accommodate it?

    2 min answer porterphysicalexceptionsreconciliation
  10. Physical-World Failure Modes advanced

    A regional power cut takes out 9,000 building-controller devices for six hours. Power returns and 8,700 of them reconnect within ten minutes. The other 300 never come back, and the gateway logs show TLS handshake failures with "certificate is not yet valid". The certificates do not expire for another year. What failed, and which design decision made it possible?

    3 min answer clocktlscold-startfleet
  11. Push & Background Work advanced

    Design push and background work for a chat application delivering to hundreds of millions of devices.

    2 min answer pushnotificationsfanoutbattery
  12. Sync & Conflict Resolution advanced

    A field application has been live for three months and support reports that engineers occasionally lose completed job reports. What do you investigate?

    2 min answer offlinesyncconflictincident