API Design Compared: What Actually Matters

Consider access control specifically. A design that cannot be rolled back is a design that cannot be changed safely. Access Control: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. That applies to access control as well.

For schema migration, the constraint matters more than the feature list. Periodic jobs should be safe to run twice, because they will be. Teams working on schema migration usually discover this the hard way. You rarely need a new component to fix a boundary problem. The signal you want is often already logged, just not aggregated. This is most visible in schema migration.

Consent is ongoing. A person can withdraw it at any point, including after previously agreeing or after an activity has begun. If they say stop, move away, become unresponsive or otherwise indicate discomfort, pause immediately and ask what they want. Do not argue, bargain or demand an explanation.

Search Indexing: Configurations should be reviewable in a diff, not only in a console. Search Indexing: The best time to add an index is before the table gets large. Search Indexing: Failures are usually correlated, so plan for the shared dependency.

Backup Strategy: If a metric has no owner, it will drift until it causes an incident. Backup Strategy: The cheapest optimisation is usually removing work nobody asked for. Backup Strategy: Aggregating at write time trades flexibility for predictable read cost.

Raise the topic when neither of you is under pressure to make an immediate decision. A private conversation outside a sexual situation can give each person time to listen and think. If you need to set a limit in the moment, do it then; you do not have to wait for a planned discussion. Short, direct wording is often easier to understand than hints, especially when the subject feels sensitive.

The first thing to settle is the failure mode, not the happy path. This is most visible in storage tiers. Consider storage tiers specifically. Measurements taken once are anecdotes; you need a baseline that repeats. Storage Tiers: Costs usually concentrate in a small number of operations, so find those first.

Teams working on release process usually discover this the hard way. Serving static bytes is the cheapest thing you can do at the edge. A schema is an interface; changing it is a migration, not an edit. This is most visible in release process. Consider release process specifically. Track the denominator as carefully as the numerator.

You can often replace a coordination problem with an idempotency key. The same reasoning holds for log analysis. For log analysis, the constraint matters more than the feature list. Anything that grows without a bound will eventually hit one. Teams working on log analysis usually discover this the hard way. Documentation that is not tested tends to describe the previous version.

Backup Strategy: The first thing to settle is the failure mode, not the happy path. Backup Strategy: Measurements taken once are anecdotes; you need a baseline that repeats. Backup Strategy: Costs usually concentrate in a small number of operations, so find those first.

Cost Controls: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. That applies to cost controls as well. In practice, cost controls behaves differently: Failures are usually correlated, so plan for the shared dependency.

Monitoring Alerts: The interesting number is not the average, it is the 99th percentile. Monitoring Alerts: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Monitoring Alerts: Every abstraction you add is a place where behaviour can differ from intent.

A design that cannot be rolled back is a design that cannot be changed safely. The same reasoning holds for queue design. For queue design, the constraint matters more than the feature list. Latency budgets are easier to defend when every hop has a stated ceiling. Teams working on queue design usually discover this the hard way. Caching helps only until the invalidation rules become the bottleneck.

In practice, search indexing behaves differently: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. The same reasoning holds for search indexing. For search indexing, the constraint matters more than the feature list. The signal you want is often already logged, just not aggregated.

Observability: A design that cannot be rolled back is a design that cannot be changed safely. Observability: Latency budgets are easier to defend when every hop has a stated ceiling. Observability: Caching helps only until the invalidation rules become the bottleneck.

Load Balancing: The interesting number is not the average, it is the 99th percentile. Load Balancing: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Load Balancing: Every abstraction you add is a place where behaviour can differ from intent.

Cost Controls: Serving static bytes is the cheapest thing you can do at the edge. Cost Controls: A schema is an interface; changing it is a migration, not an edit. Cost Controls: Track the denominator as carefully as the numerator.

Serving static bytes is the cheapest thing you can do at the edge. That applies to data pipelines as well. In practice, data pipelines behaves differently: A schema is an interface; changing it is a migration, not an edit. Track the denominator as carefully as the numerator. The same reasoning holds for data pipelines.

Access Control: You can often replace a coordination problem with an idempotency key. Access Control: Anything that grows without a bound will eventually hit one. Access Control: Documentation that is not tested tends to describe the previous version.

Content Delivery: You can often replace a coordination problem with an idempotency key. Content Delivery: Anything that grows without a bound will eventually hit one. Content Delivery: Documentation that is not tested tends to describe the previous version.

Consent also depends on capacity: a person must be able to understand the choice and communicate it. Alcohol or other drugs can affect judgment and awareness, and the effect differs from person to person. If someone seems confused, unconscious or too impaired to make or communicate a decision, do not proceed. Laws define capacity and consent differently across countries, so local legal guidance matters.

Use statements about your own needs rather than trying to guess your partner’s intentions. You might say, “I’m comfortable with this, but not with that,” or, “I need us to stop if I say pause.” Be specific about what you mean by words such as “slow down” or “check in.” Ask your partner what they are comfortable with, and leave room for an answer without interrupting or arguing.

Monitoring Alerts: If the rollback plan needs a meeting, it is not a rollback plan. Monitoring Alerts: Small pages that stay small are easier to keep fast than large ones made fast. Monitoring Alerts: Write the invariant down; otherwise it lives only in someone's memory.

A design that cannot be rolled back is a design that cannot be changed safely. That applies to cost controls as well. In practice, cost controls behaves differently: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. The same reasoning holds for cost controls.