post type
Conceptual, architectural explainers — how a subsystem actually works underneath.
How GitHub's OIDC tokens, cloud trust policies, audience and subject claims replace static CI keys while keeping workflows and environments constrained.
A precise guide to Guaranteed, Burstable, and BestEffort Pods, including request math, cgroup enforcement, OOM behavior, and node-pressure eviction.
How Kubernetes impersonation headers and RBAC verbs support least-privilege authorization tests while preserving identity, scope, and audit evidence.
How Server-Side Apply records field ownership, detects conflicting intent, supports shared objects, and differs from replacement and merge patch workflows.
How tail sampling buffers complete traces, evaluates outcome-aware policies, controls memory, and preserves representative telemetry during failures.
How FreeDOS NANSI interprets console escape sequences, colors, cursor controls and optional key redefinition, plus loading, testing, and safety boundaries.
How COUNTRY, KEYB, DISPLAY, MODE and CHCP coordinate FreeDOS locale data, keyboard input and screen glyphs without confusing bytes with Unicode.
How DPMI hosts give DOS applications selectors, linear memory, real-mode callbacks, interrupts, exceptions, and virtual memory without replacing DOS.
How FreeDOS reads and writes FAT32 volumes, including BPB fields, 28-bit cluster chains, root-directory changes, FSInfo hints, size limits, and repair.
How DOS packet drivers expose Ethernet classes, receiver callbacks, send operations, handles, interrupt vectors, and hardware-specific configuration.