https://ejsymont.com/en/New practical IT architecture articlesenhttps://ejsymont.com/en/architecture-in-motion/cve-2026-98432-linux-kernel-ipv4-tcp-use-after-free-issue-am-rss-7d5372e207d06da38c41cf8feeed9a8c-r2/https://ejsymont.com/en/architecture-in-motion/cve-2026-98432-linux-kernel-ipv4-tcp-use-after-free-issue-am-rss-7d5372e207d06da38c41cf8feeed9a8c-r2/Tue, 03 Nov 2026 12:00:00 GMTThe newly disclosed CVE-2026-98432 vulnerability concerns the support of TCP/IPv4 connections in the Linux kernel and can lead to system failure, memory violation, and under certain conditions even to remote code execution. The problem…https://ejsymont.com/en/architecture-in-motion/openai-and-poland-s-nask-partner-to-advance-ai-safety-and-am-rss-1b142299f1d3afb5aa3bf9add9719b82-r3/https://ejsymont.com/en/architecture-in-motion/openai-and-poland-s-nask-partner-to-advance-ai-safety-and-am-rss-1b142299f1d3afb5aa3bf9add9719b82-r3/Tue, 03 Nov 2026 12:00:00 GMTThe OpenAI–NASK research partnership signals a closer focus on AI safety. What does it mean for enterprise architects, system assurance, agent permissions and verifiable security evidence?https://ejsymont.com/en/foundations/unknown-transaction-who-owns-the-final-outcome-am-pr-1-r1/https://ejsymont.com/en/foundations/unknown-transaction-who-owns-the-final-outcome-am-pr-1-r1/Fri, 30 Oct 2026 12:00:00 GMTIn a fictional distributed system, a request times out even though the operation may have committed. How do we detect ambiguous outcomes, prevent duplicate effects and escalate cases that cannot be resolved automatically? An architecture…https://ejsymont.com/en/practice/2026-10-30-unknown-odpowiedzialnosc/https://ejsymont.com/en/practice/2026-10-30-unknown-odpowiedzialnosc/Fri, 30 Oct 2026 12:00:00 GMTWho determines the actual outcome, who discovers and reconciles UNKNOWN cases, and who owns unresolved exceptions? In two or three sentences, propose clear responsibilities and one acceptance test.https://ejsymont.com/en/architecture-in-motion/ai-agents-and-ci-share-a-compute-entitlement-what-changes-am-20261029-001/https://ejsymont.com/en/architecture-in-motion/ai-agents-and-ci-share-a-compute-entitlement-what-changes-am-20261029-001/Thu, 29 Oct 2026 12:00:00 GMTOn 28 October 2026, GitHub announced a shared compute entitlement spanning certain GitHub Actions workloads and Copilot cloud sandboxes. This is more than a billing change: agent experiments can consume capacity from the same allowance…https://ejsymont.com/en/foundations/feature-flags-operational-contract/https://ejsymont.com/en/foundations/feature-flags-operational-contract/Sat, 24 Oct 2026 12:00:00 GMTA six-field operational contract: owner, blast radius, fallback, shutdown trigger, propagation time and removal date.https://ejsymont.com/en/foundations/business-audit-events/https://ejsymont.com/en/foundations/business-audit-events/Wed, 21 Oct 2026 12:00:00 GMTHTTP 200 is not evidence of a state change. Three options, transactional outbox and five audit acceptance tests.https://ejsymont.com/en/anti-patterns/2026-10-19-zielone-komponenty-zdrowa-usluga/https://ejsymont.com/en/anti-patterns/2026-10-19-zielone-komponenty-zdrowa-usluga/Mon, 19 Oct 2026 12:00:00 GMTA team aggregates component health checks into availability while accepted work never reaches its terminal state.https://ejsymont.com/en/architecture-in-motion/github-actions-lockfiles/https://ejsymont.com/en/architecture-in-motion/github-actions-lockfiles/Mon, 19 Oct 2026 12:00:00 GMTThe 14 October public preview pins actions and their dependencies to commits, but still needs an update process and review of the diff.https://ejsymont.com/en/foundations/business-process-availability/https://ejsymont.com/en/foundations/business-process-availability/Mon, 19 Oct 2026 12:00:00 GMTAn evidence ladder from liveness and readiness through work progress to a measurable end-to-end outcome.https://ejsymont.com/en/architecture-with-ai/agent-action-gateway/https://ejsymont.com/en/architecture-with-ai/agent-action-gateway/Sun, 18 Oct 2026 12:00:00 GMTAction gateway, independent authorisation, human approval and audit for AI agents.https://ejsymont.com/en/foundations/retry-budget-single-owner/https://ejsymont.com/en/foundations/retry-budget-single-owner/Fri, 16 Oct 2026 12:00:00 GMTHow 3 × 3 attempts amplify load and how to establish one retry owner, a shared deadline and 429/503 tests.https://ejsymont.com/en/practice/2026-10-15-zielony-healthcheck-przerwany-proces/https://ejsymont.com/en/practice/2026-10-15-zielony-healthcheck-przerwany-proces/Thu, 15 Oct 2026 12:00:00 GMTWould you classify the service as available? In 2–3 sentences state its boundary, the signals and controlled test you need, and what would change your decision.https://ejsymont.com/en/foundations/do-we-need-data-replication/https://ejsymont.com/en/foundations/do-we-need-data-replication/Wed, 14 Oct 2026 12:00:00 GMTFrom measurable demand and data freshness to a choice: optimise, read replica or failover.https://ejsymont.com/en/foundations/conditional-architecture-approval/https://ejsymont.com/en/foundations/conditional-architecture-approval/Tue, 13 Oct 2026 12:00:00 GMTSix fields for each condition: criterion, owner, evidence, verifier, gate and failure action.https://ejsymont.com/en/anti-patterns/2026-10-11-saas-nas-nie-interesuje/https://ejsymont.com/en/anti-patterns/2026-10-11-saas-nas-nie-interesuje/Sun, 11 Oct 2026 12:00:00 GMTAn API and SLA do not resolve data, IAM, continuity, operations and exit questions.https://ejsymont.com/en/architecture-in-motion/cloud-service-mesh-istiod-retirement/https://ejsymont.com/en/architecture-in-motion/cloud-service-mesh-istiod-retirement/Sun, 11 Oct 2026 12:00:00 GMTThe 1 March 2028 deadline, two migration paths and evidence before moving traffic.https://ejsymont.com/en/architecture-with-ai/hld-from-vendor-documentation/https://ejsymont.com/en/architecture-with-ai/hld-from-vendor-documentation/Sun, 11 Oct 2026 12:00:00 GMTTutorial 02: source register, visible unknowns, design-changing questions and statement verification.https://ejsymont.com/en/foundations/saas-architecture-due-diligence/https://ejsymont.com/en/foundations/saas-architecture-due-diligence/Sun, 11 Oct 2026 12:00:00 GMTSeven review areas and a responsibility → requirement → evidence matrix.https://ejsymont.com/en/practice/2026-10-11-saas-granice-odpowiedzialnosci/https://ejsymont.com/en/practice/2026-10-11-saas-granice-odpowiedzialnosci/Sun, 11 Oct 2026 12:00:00 GMTWhat decision would you make now? In 2–3 sentences, identify the information you need, the internals you can leave with the provider and evidence required before acceptance.https://ejsymont.com/en/architecture-in-motion/github-installation-token-format/https://ejsymont.com/en/architecture-in-motion/github-installation-token-format/Sun, 04 Oct 2026 12:00:00 GMTA longer installation token can expose storage, proxy and redaction limits. Verify integrations without exposing secrets.https://ejsymont.com/en/anti-patterns/2026-10-03-zgodnosc-tylko-w-schemacie/https://ejsymont.com/en/anti-patterns/2026-10-03-zgodnosc-tylko-w-schemacie/Sat, 03 Oct 2026 12:00:00 GMTA team treats an additive schema change as safe without running supported consumers or checking contract behaviour.https://ejsymont.com/en/foundations/evolving-api-contracts/https://ejsymont.com/en/foundations/evolving-api-contracts/Sat, 03 Oct 2026 12:00:00 GMTWhy an optional field can still break a client, and how to verify source, wire and semantic compatibility.https://ejsymont.com/en/practice/2026-10-03-opcjonalne-pole-api/https://ejsymont.com/en/practice/2026-10-03-opcjonalne-pole-api/Sat, 03 Oct 2026 12:00:00 GMTWould you expose the field to every client? In 2–3 sentences, state your decision, how you would limit risk and what evidence you need before broader rollout.https://ejsymont.com/en/anti-patterns/2026-10-02-powiadomienie-steruje-transakcja/https://ejsymont.com/en/anti-patterns/2026-10-02-powiadomienie-steruje-transakcja/Fri, 02 Oct 2026 12:00:00 GMTFailure of an auxiliary email makes a successfully committed order look failed and encourages the user to create a duplicate.https://ejsymont.com/en/architecture-in-motion/github-actions-macos-14-retirement/https://ejsymont.com/en/architecture-in-motion/github-actions-macos-14-retirement/Fri, 02 Oct 2026 12:00:00 GMTThe 2 November retirement and October brownouts call for testing the full build, signing and publication chain.https://ejsymont.com/en/architecture-with-ai/review-ai-generated-hld/https://ejsymont.com/en/architecture-with-ai/review-ai-generated-hld/Fri, 02 Oct 2026 12:00:00 GMTTutorial: from a brief and questions to a failure case, a diagram, verification and an ADR.https://ejsymont.com/en/foundations/asynchronous-notifications/https://ejsymont.com/en/foundations/asynchronous-notifications/Fri, 02 Oct 2026 12:00:00 GMTDurably record auxiliary work, retry the right step and avoid duplicating the business operation.https://ejsymont.com/en/practice/2026-10-02-email-po-zamowieniu/https://ejsymont.com/en/practice/2026-10-02-email-po-zamowieniu/Fri, 02 Oct 2026 12:00:00 GMTWhat result would you return to the user, and what would you retry? Explain how you would avoid both a second order and a lost notification.https://ejsymont.com/en/anti-patterns/2026-10-01-autoryzacja-tylko-na-wejsciu/https://ejsymont.com/en/anti-patterns/2026-10-01-autoryzacja-tylko-na-wejsciu/Thu, 01 Oct 2026 12:00:00 GMTThe gateway validates a token, while downstream layers assume that an authenticated user may access any referenced resource.https://ejsymont.com/en/architecture-in-motion/cloud-storage-default-checksums/https://ejsymont.com/en/architecture-in-motion/cloud-storage-default-checksums/Thu, 01 Oct 2026 12:00:00 GMTThe 30 September change improves transfer integrity, with limits for range reads and composite uploads.https://ejsymont.com/en/foundations/change-impact-analysis/https://ejsymont.com/en/foundations/change-impact-analysis/Thu, 01 Oct 2026 12:00:00 GMTCheck compatibility and scale the review to the actual change.https://ejsymont.com/en/foundations/graceful-degradation/https://ejsymont.com/en/foundations/graceful-degradation/Thu, 01 Oct 2026 12:00:00 GMTWhen optional-feature failure should not block a result, and where the boundary lies.https://ejsymont.com/en/foundations/idempotency-lookup-compensation/https://ejsymont.com/en/foundations/idempotency-lookup-compensation/Thu, 01 Oct 2026 12:00:00 GMTSafe retries and decisions when an operation has an unknown outcome.https://ejsymont.com/en/foundations/tenant-isolation-invariant/https://ejsymont.com/en/foundations/tenant-isolation-invariant/Thu, 01 Oct 2026 12:00:00 GMTCarry trusted tenant context through authorisation, data, caches, search and asynchronous work.https://ejsymont.com/en/practice/2026-10-01-cache-bez-tenanta/https://ejsymont.com/en/practice/2026-10-01-cache-bez-tenanta/Thu, 01 Oct 2026 12:00:00 GMTWhere did tenant isolation break? How will you change authorisation, the cache key and tests so the fix covers the whole path rather than this endpoint alone?https://ejsymont.com/en/practice/2026-10-01-nieznany-wynik-transakcji/https://ejsymont.com/en/practice/2026-10-01-nieznany-wynik-transakcji/Thu, 01 Oct 2026 12:00:00 GMTWhat would you do after exhausting safe retries? Explain the operation identifier, status lookup and the condition for reversing payment.https://ejsymont.com/en/practice/2026-10-01-opcjonalny-zapis/https://ejsymont.com/en/practice/2026-10-01-opcjonalny-zapis/Thu, 01 Oct 2026 12:00:00 GMTWhat would you show after the storage error? Explain why it is appropriate here and when a different approach would be needed.https://ejsymont.com/en/practice/2026-10-01-wymiana-urzadzen/https://ejsymont.com/en/practice/2026-10-01-wymiana-urzadzen/Thu, 01 Oct 2026 12:00:00 GMTWhich three areas would you check before concluding that the replacement needs no architecture change? Explain what evidence would support a safe rollout.https://ejsymont.com/en/anti-patterns/2026-09-30-backup-bez-proby-odtworzenia/https://ejsymont.com/en/anti-patterns/2026-09-30-backup-bez-proby-odtworzenia/Wed, 30 Sep 2026 12:00:00 GMTA green backup report does not prove the entire service can return within its recovery target.