Urgent.News

One page, thousands of outlets. See who else covered it.

Editions

Tech

Dev Log: 2026-08-13 — machines that state their own identity, and four fakes that certified nothing

Twenty-six commits across six repos, and the day had one accidental theme running through it: things that were green and shouldn't have been. A test suite that exercised a code path incapable of reaching a certificate authority. Fixtures written to match a parser's bug. A deploy step that failed on every release and got filed as cosmetic. Forty-six confirmation messages nobody could see. Plus the…

On August 13, 2026, software engineers made significant progress in several repositories, with a recurring theme of green elements that should not have existed. A test suite failed to reach a certificate authority, fixtures matched a parser's bug, and a deploy step consistently failed during releases. Meanwhile, developers taught a provisioning platform to ask machines about their identity before making changes, leading to a write-up of the process.

One key insight was that a row in a database isn't necessarily a machine, as control planes provisioning VMs over SSH could only confirm the existence of a row, regardless of the machine's actual state. Three solutions were implemented: a world-readable manifest containing self-generated data, a read-only probe returning an enum outcome, and a version ledger for upgrades. The underlying principle was that unknown should never resolve to proceed.

Additionally, an ACME client that couldn't issue certificates was created, accepting an HTTP-01 challenge with an empty JSON object. The method passed an empty array, resulting in malformed JSON and preventing any issuance from occurring. To address this, a function was developed to encode payloads based on the input type, ensuring the correct encoding for three distinct payload shapes.

Another issue arose when a health check could only return "down" due to a parser mismatch. HAProxy reported servers as "up" in its stats, but the health check reported them as "down." Fixtures written based on code rather than real output contributed to this problem, actively certifying a faulty health check. A new guard was added to compile every registered view in memory, preventing failures caused by missing components.

Forty-six confirmation messages, invisible to users, were automated to improve the user experience during deployment. A script failed due to a parse issue, and another script failed because its listener wasn't bound. These issues were addressed by adjusting the script execution order and ensuring proper listener binding.

Lastly, an event organizer required a ticket type only accessible to specific members. The developers created a solution to grant access based on membership status, ensuring only eligible users could purchase the desired tickets.

Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at dev.to →

More in Tech

Ask the machine what it is before you change it

I spent today on a control plane that provisions plain VMs over SSH — the kind of app where a wrong answer doesn't render badly, it reinstalls a database daemon on a machine that's serving traffic.

More from Monday 17 August →