Field Notes
Write-ups from real engineering work — bugs found in the wild, fixes shipped upstream, and the mechanisms underneath them.
The Anatomy of a Guard That Never Passed
A security fix hardened a GitHub Actions workflow against artifact poisoning, and in doing so rejected every outside contributor for six months. Nobody noticed, because the only people who could see it working were the people it was never checking. I traced it from a CI failure on my own PR, reported it, had my proposed fix refused for a better reason than I expected, and shipped the maintainer's version to two repositories. Includes a validation simulator you can run.
The Anatomy of an Intermittent 500
CrowdStrike's Python SDK was returning a 500 that never came from the API. The message was a Python exception, the status code was manufactured, and the response header support needed to research the failure had been thrown away. I traced it to one line in the error handler that calls .get() on raw bytes, found the adjacent open PR fixed two of the four trigger conditions but not the cause, and shipped the guard upstream. Includes a response path tracer you can step through.
The Anatomy of an Undeclared Caption Track
A stream declares one caption track and the player offers two. The extra one is real, decodable, and nowhere in the manifest. I traced it into the bytes riding inside H.264 frames, found a four year old issue where the declaration was read for the label but never for the decision, and shipped the fix upstream. The repro stream no longer existed, so I wrote a CEA-608 encoder to build one. Includes a wire decoder you can step through.
The Anatomy of an Undefined Symbol
A security sensor that works everywhere modern silently refuses to start on half of enterprise Linux. I traced it from a red dashboard to a missing linker flag, proved the mechanism with one environment variable, and submitted the two-line fix upstream. Includes a linker you can step through yourself.
The Anatomy of a Race Condition
I traced a console error in Music Blocks to a positioning patch that silently lost a race against slow page loads. Inside that one small fix live seven JavaScript mechanisms every working engineer leans on daily — each one taught here with code you can poke, ending in a playable simulation of the race itself.
