InfoQ Homepage Articles
-
/articles/high-availability-not-resilience-cloud/en/smallimage/high-availability-not-resilience-cloud-thumbnail-1790670587417.jpg)
High Availability is Not Resilience: Why Cloud Systems Fail When it Matters Most
A routine TLS 1.3 upgrade silently broke Route 53 health checks, causing a CDN to stop routing traffic to a healthy region while internal dashboards showed nothing wrong. This article examines why HA and resilience are different problems, how control-plane dependencies create invisible failure modes, and why recovery capability erodes without explicit ownership.
-
/articles/ai-agents-improve-software-architecture/en/smallimage/ai-agents-improve-software-architecture-thumbnail-1790153650841.jpg)
Five Ways to Use AI Coding Agents to Improve Your Software Architecture
Modern architectures often use legacy services for specific tasks, but these services may lack accurate documentation and using them can be risky if you don't understand them well. AI coding agents can help close that knowledge gap.
-
/articles/agent-harness-build-one/en/smallimage/The-Agent-Harness-What-It-Is-and-Two-Ways-to-Build-One-thumb-1789997776393.jpg)
The Agent Harness: What it is and Two Ways to Build One
This article explains the development and operational layers of an agent harness through two implementations of a finance assistant: AWS AgentCore Harness and LangChain with Envoy AI Gateway. It compares how each handles tools, memory, model access, cost control, and observability, and examines the trade-offs in operational ownership, portability, and engineering effort.
-
/articles/modular-edge-computing/en/smallimage/modular-edge-computing-thumbnail-1790163631197.jpg)
Modular Edge Computing at Multi-Tenant SaaS Scale on Cloudflare Workers
At multi-tenant SaaS scale, a monolithic edge worker creates deployment coupling and broad blast radius. The article presents a modular Cloudflare Workers architecture using service bindings, with image optimization as a worked example of per-tenant format negotiation and device-aware sizing. It covers multi-CDN differences, staged releases, configuration, and testing.
-
/articles/architecture-enterprise-personalization-relevance-governance/en/smallimage/Beyond-Relevance-A-Governance-First-Architecture-for-Enterprise-Personalization-thumb-1789730126317.jpg)
Beyond Relevance: a Governance-First Architecture for Enterprise Personalization
This article examines the limitations of conventional personalization systems and highlights the need for a governance-first architecture. It emphasizes separating relevance from governance to ensure recommendations are context-aware, auditable, and compliant. The architecture integrates stateful memory, policy-driven AI orchestration, and explainable scoring to enhance personalization systems.
-
/articles/secure-scalable-facial-verification/en/smallimage/secure-scalable-facial-verification-thumbnail-1789468796366.jpg)
Architecting Secure and Scalable Facial Verification Systems
When three thousand employees verify at once, synchronous API calls collapse. This article presents a four-layer architecture for high-volume face verification: client-side filtering that cut cloud costs 30%, decoupled detection and verification enabling 10x scaling, risk-based dynamic thresholds, and zero-trust privacy with consent gates and automated data purging for GDPR and HIPAA.
-
/articles/next-dsl-author-language-model/en/smallimage/Your-Next-DSL-Author-Is-a-Language-Model-thumb-1789048983233.jpg)
Your Next DSL Author is a Language Model
In this article, the author introduces Typed Domain Grounding, an approach to reducing LLM hallucinations in domain-specific languages by embedding them in mainstream typed languages. Using kUML benchmarks and an infrastructure-as-code example, he explores how compiler validation and generate-compile-repair loops can make model-generated DSL output more reliable.
-
/articles/durable-workflows-postgres/en/smallimage/Implementing-Durable-Workflows-on-Postgres-Without-an-External-Orchestrator-thumb-1789129413946.jpg)
Implementing Durable Workflows on Postgres without an External Orchestrator
Postgres can serve as the durable state store and coordination layer for workflows, eliminating the need for an external orchestrator. SKIP LOCKED enables concurrent work processing, primary-key checkpoints enforce idempotency, and leases support crash recovery. Workflow sleeps and human approvals can also be persisted as database state and survive restarts.
-
/articles/when-spec-driven-development-pays-off/en/smallimage/When-Spec-Driven-Development-Pays-Off-thumb-1788790605567.jpg)
When Spec-Driven Development Pays off
AI coding assistants have become a core part of software development. AI-generated code has shown productivity gains, but it's also contributing to security weaknesses and familiar bug patterns. In this article, author Nitin Garg highlights the bottleneck has moved from code generation to code verification, and how to detect & mitigate it when the AI-generated behavior diverges from the intent.
-
/articles/chaos-engineering-ecs-payments/en/smallimage/chaos-engineering-ecs-payments-thumbnail-1788254676411.jpg)
Implementing Chaos Engineering in Financial Payment Systems: Lessons from Enterprise ECS Deployments
Standard chaos engineering assumes experiments stop cleanly, blast radius is knowable in advance, and production is fair game. Payment systems violate all three. Salim Adedeji describes ECS-specific failure modes from enterprise deployments: a 60-second DNS TTL that produced 93-second failover, retry logic amplifying database load 2.4x, and AZ rebalancing loops that generic tooling misses.
-
/articles/gcp-wif-scale/en/smallimage/gcp-wif-scale-thumbnail-1787838950646.jpg)
Eliminating Long-Lived Credentials in GCP with Workload Identity Federation
Long-lived GCP service account keys are secrets that must be managed forever, are hard to rotate, and are easy to leak. Scaling Workload Identity Federation to 120+ production projects shows why it changes how machine identity is approached entirely: keys are secrets to manage, federated identities are trust relationships configured once, gated by attribute conditions.
-
/articles/pqc-in-spring-boot/en/smallimage/pqc-in-spring-boot-thumbnail-1787646727709.jpg)
Post-Quantum Cryptography in Spring Boot: Four Patterns You Can Ship This Sprint
There are four patterns that bring PQC into a Spring Boot fleet: encrypting payloads between services, locking down database fields, signing documents that need to hold up for decades, and moving service tokens off RS256. Along the way, we discuss why Harvest Now, Decrypt Later is already happening, and why none of this is production-safe until KMS or Vault is in place.