loading
$ nti build --optimize-images
fetchthumbs
renderpage
waiting for assets
Tag
#ops articles
Articles related to this tag. If you’re new, start with the newest posts.
Loading thumbs
aillmops
·4 min read
LLM observability: a minimal logging checklist for AI apps (2026)
A practical checklist to add minimal-but-sufficient logs for AI apps and automations. Capture the evidence you need for debugging, cost control, and incident response without logging secrets.
Read more→
Loading thumbs
securitywebops
·4 min read
Next.js CSP rollout: how to ship Report-Only without breaking auth/analytics (checklist)
A practical CSP rollout plan for Next.js: start in Report-Only, collect violation reports, tighten allowlists, migrate scripts toward nonces/hashes, then enforce with a rollback plan.
Read more→
Loading thumbs
securitywebops
·4 min read
Next.js security headers checklist: what to ship first (HSTS, CSP Report-Only, COOP/COEP)
A practical checklist for security headers in Next.js. Start with low-breakage headers, add HSTS only when HTTPS is guaranteed, stage CSP in Report-Only, and apply COOP/COEP/CORP only on routes that need cross-origin isolation.
Read more→
Loading thumbs
securityopsweb
·3 min read
Dependabot policy checklist: weekly batching, grouping, and safe update gates
A practical Dependabot operating policy: scope (npm + Actions), weekly batching, grouping, safe defaults for auto-merge, and CI gates that prevent update PRs from becoming incidents.
Read more→
Loading thumbs
securityopsweb
·3 min read
GitHub Actions security hardening checklist: permissions, SHA pinning, and PR event traps
A practical checklist to harden GitHub Actions as part of your software supply chain. Focus on least-privilege permissions, pinning third-party Actions by SHA, safe handling of fork PRs, and deployment gates.
Read more→
Loading thumbs
securitywebops
·3 min read
npm supply chain defense checklist: how to block risky dependency changes in CI
A practical checklist to reduce npm supply chain risk by treating dependency diffs as security events. Focus on new dependencies, install scripts, lockfile discipline, and incident first moves.
Read more→
Loading thumbs
web3airdropsops
·3 min read
A weekly airdrop tracking routine (low time, low risk)
A practical weekly workflow to collect airdrop leads, verify official sources, track deadlines, and reduce scam exposure — in 30–45 minutes per week.
Read more→
Loading thumbs
seogoogle-search-consoleindexing
·3 min read
Google Search Console setup for Next.js + Vercel: fastest verification + sitemap checklist
A practical checklist to set up Google Search Console for a Next.js site on Vercel: choose Domain property, verify with DNS TXT, submit sitemap.xml, and run a minimal post-setup validation to avoid common indexing traps.
Read more→