1. Profiling & Optimisation intermediate

    A team has profiled a service and found the top three functions by CPU time. Why is optimising them often the wrong next step?

    2 min answer profilingoptimisationamdahlmeasurement
  2. Profiling & Optimisation advanced

    Discord's Read States service, written in Go, showed latency spikes every two minutes like clockwork. The team had written it carefully with very few allocations, and the spikes appeared regardless of load. Their published account from 2020 explains the cause and the rewrite that followed. What was happening, and what does it teach about periodic latency?

    3 min answer discordgarbage collectiontail latencyruntime
  3. Progressive Delivery advanced

    A canary deployment looks healthy on average latency while a small percentage of users experience severe failures. Which signals should gate the rollout?

    2 min answer progressive-deliverycanarysegmentationbusiness-metrics
  4. Progressive Delivery advanced

    A payments platform wants progressive delivery. What must the rollout observe, and which changes cannot be rolled out progressively at all?

    2 min answer razorpaycanaryrollouthalt
  5. Progressive Delivery advanced

    What should automated rollout gates measure, and how do you prevent both false confidence and false failures?

    2 min answer canarygatessegmentationstatistics
  6. Progressive Delivery advanced

    Your canary analysis compares the canary's error rate against current production. Results are noisy and unreliable. What is methodologically wrong?

    2 min answer netflixcanarystatisticsmethod
  7. Progressive Delivery intermediate

    Your codebase has 340 feature flags. Nobody knows which are live. A recent incident was caused by an untested flag combination. How do you get out of this?

    2 min answer feature-flagstechnical-debtcomplexity
  8. Progressive Delivery advanced

    Your service handles 40 requests per minute. Product wants canary releases with automated analysis. What do you tell them?

    2 min answer canarystatisticsdeployment
  9. Prompt Injection Defence advanced

    An AI assistant reads code and issues from repositories, including untrusted ones, and can call tools. Why is prompt injection a structural problem, and what actually mitigates it?

    2 min answer prompt-injectionuntrusted-contenttoolsisolation
  10. Prompt Injection Defence advanced

    An agent reads customer emails and can issue refunds. What is the threat and how do you bound it?

    2 min answer prompt-injectionleast-privilegehuman-in-the-looptrust-boundaries
  11. Prompt Injection Defence advanced

    An agent with tool access processes untrusted content. Why is prompt injection not solvable at the prompt layer, and what architectural controls actually limit the damage?

    3 min answer prompt-injectionagentstool-callingleast-privilege
  12. Prompt Injection Defence advanced

    An application passes user input into a model that can call tools. What is the threat, and where must the control live?

    2 min answer hasuraprompt-injectiontoolsauthorisation