Engineering notes · set of 6
Six short notes on how the plane stays honest under reclaim, streaming races, admission, concurrent spend, cursed jobs, and one real Postgres gotcha. Skim before an interview or an ops incident — not a second copy of the architecture docs.
A stale runner cannot overwrite the winner after reclaim.
Listen on the event broker before dispatch so early tokens are not lost.
One admission funnel; production serve refuses an insecure posture.
Crash-loop jobs stop reclaiming after a hard max_retries ceiling.
Reserve an estimate at create time so concurrent runs can't all pass a terminal-only budget check at once.
A Postgres 16 circular-grant gotcha that only shows up on a non-superuser DSN — and why superuser-only test coverage hid it.
Related: decision write-ups · public chapters · Docs · Engineering notes index · Docs · Ops