A Field Guide to Schema Migration

Monitoring Alerts: Periodic jobs should be safe to run twice, because they will be. Monitoring Alerts: You rarely need a new component to fix a boundary problem. Monitoring Alerts: The signal you want is often already logged, just not aggregated.

In practice, release process behaves differently: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. The same reasoning holds for release process. For release process, the constraint matters more than the feature list. The signal you want is often already logged, just not aggregated.

Consider release process specifically. If the rollback plan needs a meeting, it is not a rollback plan. Release Process: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. That applies to release process as well.

If the rollback plan needs a meeting, it is not a rollback plan. The same reasoning holds for data pipelines. For data pipelines, the constraint matters more than the feature list. Small pages that stay small are easier to keep fast than large ones made fast. Teams working on data pipelines usually discover this the hard way. Write the invariant down; otherwise it lives only in someone's memory.

API Design: The first thing to settle is the failure mode, not the happy path. API Design: Measurements taken once are anecdotes; you need a baseline that repeats. API Design: Costs usually concentrate in a small number of operations, so find those first.

Teams working on backup strategy usually discover this the hard way. The interesting number is not the average, it is the 99th percentile. Adding a cache in front of a slow query is a fix; fixing the query is a cure. This is most visible in backup strategy. Consider backup strategy specifically. Every abstraction you add is a place where behaviour can differ from intent.

Cloud Infrastructure: Configurations should be reviewable in a diff, not only in a console. Cloud Infrastructure: The best time to add an index is before the table gets large. Cloud Infrastructure: Failures are usually correlated, so plan for the shared dependency.

If the rollback plan needs a meeting, it is not a rollback plan. The same reasoning holds for schema markup. For schema markup, the constraint matters more than the feature list. Small pages that stay small are easier to keep fast than large ones made fast. Teams working on schema markup usually discover this the hard way. Write the invariant down; otherwise it lives only in someone's memory.

Cost Controls: Periodic jobs should be safe to run twice, because they will be. Cost Controls: You rarely need a new component to fix a boundary problem. Cost Controls: The signal you want is often already logged, just not aggregated.

Cost Controls: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. That applies to cost controls as well. In practice, cost controls behaves differently: Failures are usually correlated, so plan for the shared dependency.

Consent requires the ability to make and communicate a choice. Someone who is asleep or unconscious cannot agree at that time. Alcohol or other drugs can affect judgment and communication, but the legal rules for assessing capacity vary. The relevant question is not simply whether someone has consumed a substance; it is whether they can understand the choice and make it freely. If that is unclear, do not proceed.

When someone says no or changes their mind, accept the answer without punishment or pressure. A calm response such as “Okay” helps show that their choice will be respected. They do not owe you an alternative activity, reassurance or a detailed explanation.

Content Delivery: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to content delivery as well. In practice, content delivery behaves differently: The signal you want is often already logged, just not aggregated.

Backup Strategy: A design that cannot be rolled back is a design that cannot be changed safely. Backup Strategy: Latency budgets are easier to defend when every hop has a stated ceiling. Backup Strategy: Caching helps only until the invalidation rules become the bottleneck.

Crawl Budget: A queue smooths spikes but also hides how far behind you are. Retries without jitter turn a small outage into a large one. That applies to crawl budget as well. In practice, crawl budget behaves differently: Separating the reads from the writes buys room to change either side.

Schema Migration: Serving static bytes is the cheapest thing you can do at the edge. Schema Migration: A schema is an interface; changing it is a migration, not an edit. Schema Migration: Track the denominator as carefully as the numerator.

Cloud Infrastructure: The interesting number is not the average, it is the 99th percentile. Cloud Infrastructure: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Cloud Infrastructure: Every abstraction you add is a place where behaviour can differ from intent.

A design that cannot be rolled back is a design that cannot be changed safely. That applies to schema markup as well. In practice, schema markup behaves differently: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. The same reasoning holds for schema markup.

For monitoring alerts, the constraint matters more than the feature list. A queue smooths spikes but also hides how far behind you are. Teams working on monitoring alerts usually discover this the hard way. Retries without jitter turn a small outage into a large one. Separating the reads from the writes buys room to change either side. This is most visible in monitoring alerts.

Release Process: You can often replace a coordination problem with an idempotency key. Release Process: Anything that grows without a bound will eventually hit one. Release Process: Documentation that is not tested tends to describe the previous version.

Serving static bytes is the cheapest thing you can do at the edge. The same reasoning holds for monitoring alerts. For monitoring alerts, the constraint matters more than the feature list. A schema is an interface; changing it is a migration, not an edit. Teams working on monitoring alerts usually discover this the hard way. Track the denominator as carefully as the numerator.

Teams working on schema markup usually discover this the hard way. The interesting number is not the average, it is the 99th percentile. Adding a cache in front of a slow query is a fix; fixing the query is a cure. This is most visible in schema markup. Consider schema markup specifically. Every abstraction you add is a place where behaviour can differ from intent.

Partners may have different preferences. They can discuss whether there is an option both freely want, but neither person owes a compromise involving their body, safety or privacy. If there is no mutually acceptable option, stopping or not doing the activity is a valid outcome. A difference in boundaries can also reveal a broader mismatch in expectations; that does not make either person’s limit less legitimate.

Periodic jobs should be safe to run twice, because they will be. This is most visible in data pipelines. Consider data pipelines specifically. You rarely need a new component to fix a boundary problem. Data Pipelines: The signal you want is often already logged, just not aggregated.