Gergely Orosz and Simon Eskildsen discuss the engineering decisions behind Turbopuffer, from dependency failures at Shopify to the economics of search infrastructure. Eskildsen explains using Toxiproxy to exercise real database connections under faults, checking performance assumptions against hardware limits, and combining object storage with faster storage tiers. The conversation connects infrastructure design with product costs and operational experience.
Building Turbopuffer: Gergely Orosz (@pragmaticengineer ) × Simon Eskildsen (CEO)
Related research
More curated notes connected through AI Engineering.
The Defender’s Window
OpenAI describes a staged program for AI-assisted defense: use agents to review code and infrastructure, triage alerts, enumerate attack paths, and validate security invariants while retaining strong isolation and least privilege. Its recommended rollout starts with internet-facing services and vulnerability backlogs, moves security review into CI, requires focused fixes and regression tests, and expands from read-only triage to narrowly bounded automation only after teams build evidence and confidence.
Now in preview: Find and fix software vulnerabilities with CodeMender
Google opened a preview of CodeMender, an AI code-security agent delivered through Gemini Enterprise Agent Platform and AI Threat Defense. It is designed to inspect code, identify and validate potentially exploitable defects, and produce targeted fixes, with Google’s specialized Gemini 3.5 Flash Cyber model initially restricted to governments and trusted partners.
Transforming Bedrock Guardrails events into OCSF with CloudWatch
AWS provides an implementation guide for a Lambda pipeline that converts Bedrock Guardrails intervention logs into OCSF Detection Findings in the CloudWatch unified data store. It includes field mapping and queries that correlate guardrail events with identity and network activity.