close

DEV Community

Revin profile picture

Revin

Senior engineering squads, embedded in your team. Essays on software engineering, security and technical decisions. Originals at revin.com.br

Joined Joined on  Personal website https://revin.com.br
I replayed 48 commits of one OpenAPI file: 11 of them removed a required field after clients were live

I replayed 48 commits of one OpenAPI file: 11 of them removed a required field after clients were live

Comments
5 min read
11 tools in my MCP server, 3 of them did 91% of the calls: what I ask before adding a 12th

11 tools in my MCP server, 3 of them did 91% of the calls: what I ask before adding a 12th

BERJAYA 3
Comments 4
5 min read
I grepped 61 merged pull requests for three tells: 9 had a test file with zero assertions

I grepped 61 merged pull requests for three tells: 9 had a test file with zero assertions

Comments 1
5 min read
A screen took 14 seconds with the server at 12% CPU: I measured the wait before approving two more instances

A screen took 14 seconds with the server at 12% CPU: I measured the wait before approving two more instances

Comments
4 min read
I asked production which commit it was running: 23 behind main, the oldest waiting 19 days

I asked production which commit it was running: 23 behind main, the oldest waiting 19 days

BERJAYA 1
Comments 1
5 min read
I ran git log on every rule function for 12 months: a shade over 3% of the branches took every change

I ran git log on every rule function for 12 months: a shade over 3% of the branches took every change

Comments
5 min read
An OpenAI model went looking for exposed API keys in testing. I assume my coding agent will too

An OpenAI model went looking for exposed API keys in testing. I assume my coding agent will too

Comments
5 min read
I summed CPU time by user agent for 7 days: 63% went to clients that never load a second page

I summed CPU time by user agent for 7 days: 63% went to clients that never load a second page

Comments 1
5 min read
One copy change touched 12 files: I grepped the repo and found the same discount rule written 5 times

One copy change touched 12 files: I grepped the repo and found the same discount rule written 5 times

Comments
4 min read
I stopped Postgres and /health kept returning 200 in 4 of 6 services

I stopped Postgres and /health kept returning 200 in 4 of 6 services

Comments
5 min read
1,043 branches in a pricing service: 34 changed last year, 9 disagree with the spreadsheet

1,043 branches in a pricing service: 34 changed last year, 9 disagree with the spreadsheet

Comments
6 min read
I counted scope changes with gh and jq: 41 of 118 issues arrived after the freeze, 3 got a new date

I counted scope changes with gh and jq: 41 of 118 issues arrived after the freeze, 3 got a new date

Comments
5 min read
I ran git blame on the files that touch money: 87% of the commission logic had one author

I ran git blame on the files that touch money: 87% of the commission logic had one author

Comments
5 min read
PHPCompatibility flagged 217 errors in a PHP 5.6 app. The one that cost money wasn't in the report

PHPCompatibility flagged 217 errors in a PHP 5.6 app. The one that cost money wasn't in the report

Comments
5 min read
I pointed an AI reviewer at a 2019 order service: 63 comments, and none of them was the IDOR

I pointed an AI reviewer at a 2019 order service: 63 comments, and none of them was the IDOR

Comments
4 min read
An agent wrote 14 tests for a module I knew was broken. Mutation score came back 41%

An agent wrote 14 tests for a module I knew was broken. Mutation score came back 41%

Comments
4 min read
I inherited an undocumented codebase: 2.5 days to boot it, ~400 silent errors a day

I inherited an undocumented codebase: 2.5 days to boot it, ~400 silent errors a day

Comments
6 min read
The code that passes the pitch and fails due diligence

The code that passes the pitch and fails due diligence

Comments
5 min read
I changed one number in the URL and saw another customer's orders

I changed one number in the URL and saw another customer's orders

Comments
5 min read
High test coverage is where production bugs hide best

High test coverage is where production bugs hide best

Comments
5 min read
Security isn't a feature you bolt on. It's how the team works.

Security isn't a feature you bolt on. It's how the team works.

Comments
6 min read
It was fast in the demo. Then the data grew.

It was fast in the demo. Then the data grew.

Comments
5 min read
Why EU startups are trading Poland/Romania for Brazil in 2026

Why EU startups are trading Poland/Romania for Brazil in 2026

Comments
3 min read
The estimate that wins the deal is the one that slips the most

The estimate that wins the deal is the one that slips the most

Comments
5 min read
Threat modeling in 1 hour: the method senior squads use for teams without a security engineer

Threat modeling in 1 hour: the method senior squads use for teams without a security engineer

Comments
3 min read
Hard conversation: how the CTO communicates the product needs a rewrite

Hard conversation: how the CTO communicates the product needs a rewrite

Comments
4 min read
Who Found the Outage First — You or Your Customer?

Who Found the Outage First — You or Your Customer?

Comments
6 min read
Why I almost never approve a full rewrite of your product

Why I almost never approve a full rewrite of your product

Comments
5 min read
The team they sold you isn't the team that ships your code

The team they sold you isn't the team that ships your code

Comments
6 min read
Squad as a service: what it is and when it makes sense

Squad as a service: what it is and when it makes sense

Comments
5 min read
How much does a development squad cost in 2026?

How much does a development squad cost in 2026?

Comments
5 min read
Your last vendor is still logged into your production

Your last vendor is still logged into your production

Comments
6 min read
The 5 third-party SaaS nobody audits (and that become attack doors)

The 5 third-party SaaS nobody audits (and that become attack doors)

Comments
3 min read
How to measure real seniority (without trusting resumes)

How to measure real seniority (without trusting resumes)

Comments
3 min read
I turned down a $480k contract. I'd do it again.

I turned down a $480k contract. I'd do it again.

Comments
4 min read
The stack you never update sends its bill without warning

The stack you never update sends its bill without warning

Comments
5 min read
Tech debt is a risk spreadsheet, not an engineering complaint

Tech debt is a risk spreadsheet, not an engineering complaint

Comments
4 min read
I inherited a 50-minute deploy, and it was the best news in the audit

I inherited a 50-minute deploy, and it was the best news in the audit

Comments
5 min read
I paid for the same feature three times. The money was the least of it

I paid for the same feature three times. The money was the least of it

Comments
5 min read
Who actually owns your code? The answer is usually worse than you think

Who actually owns your code? The answer is usually worse than you think

Comments
5 min read
We audited 31 broken codebases. The same numbers keep coming back.

We audited 31 broken codebases. The same numbers keep coming back.

Comments
5 min read
loading...