#identity

1 post on this topic, newest first. all tags →

Who is the agent acting as?

Every agent I audited this year had the same kind of problem. It authenticated as a service account with more access than any human on the team, on behalf of a user whose identity was lost the moment the request left the browser, so the logs couldn't say who a call was for. Fixing it is mostly an OAuth problem, and the pieces exist now.

securityai-agentsoauth+1 more

Jun 2, 20268 min10 min

~/tips/today — 2026-10-19

~cat tips/today

Never build an index on a live table without CONCURRENTLY

postgresqlmigrations

A plain CREATE INDEX takes a lock that blocks every write to the table for the whole build. On a big table that means minutes of outage that look like a hung app.

CREATE INDEX CONCURRENTLY orders_customer_idx ON orders (customer_id);

It's slower and can't run inside a transaction, so you'll have to tell your migration tool. If it fails halfway, it leaves an invalid index behind, so check pg_index.indisvalid and drop it before you retry.

↵ open y yesterday l ls /tips

esc close