Fixes permission denied at COMMIT from a PostgreSQL deferred constraint trigger whose SECURITY DEFINER function runs as its owner: grant the owner role the exact schema, table, and sequence privileges the function touches, pin its search_path, and force early checking with SET CONSTRAINTS IMMEDIATE. Use for DEFERRABLE…
Fixes an agent failing to decrypt a PGP-encrypted billing export because its decryption key expired mid-analysis, by renewing the key and hardening key handling. Use when decryption fails on new files but worked on older ones. Not for a file encrypted to a completely wrong key.
Fixes a patch agent reporting disk space preflight passed using stale metrics, then installs failing for lack of space. Use when preflight data is cached or collected long before the wave. Not for a host that genuinely filled its disk during install despite a fresh, accurate preflight.
Fixes a churn-monitor agent that skipped accounts over 10k seats because its account list was silently truncated at the context limit, by chunking account processing. Use when large accounts are mysteriously absent from agent output. Not for accounts excluded by an explicit segment filter.
Fixes restore diffs that pass a broken restore because they compare content only and ignore permissions, ownership, and links, by adding a metadata manifest to the comparison. Use when restored files are present but applications fail on access. Not for a restore where file content itself is missing or corrupt.
Fixes verification snapshots corrupted when an agent mounts the same restored volume twice, by enforcing a single read-only mount with a lease and ownership tracking. Use when a verified restore is damaged after mounting or two checks run on one volume. Not for source data corruption inside the backup itself.
Fixes restore verification that silently checks the source volume instead of the restored copy, by binding every check to the restored volume identity and path. Use when an agent reports a verified restore that never touched the backup. Not for backups that failed to run in the first place.
Fixes an agent that retries a locked restic repository until the backup window closes, by identifying the lock owner, backing off against a window deadline, and exiting early with a resumable plan. Use when backups are skipped after hours of lock retries. Not for a repository that is corrupt and fails its check.
Describes how to fix a Nakivo backup failing with target repository is inaccessible by checking the transporter, repository path and share, stored access and free space, then refreshing the repository state. Use when Nakivo jobs fail at the target stage. Not for a Nakivo source VM snapshot failure.
Describes how to fix pg_dump failing with permission denied for schema by checking the dump role privileges on schemas, tables and sequences, and aligning the dump options with those grants. Use when a PostgreSQL backup runs as a limited role. Not for a pg_dump failure caused by disk space or a version mismatch alone.
Explains why backup verification passes while a real restore fails, and closes the gap with boot, application, and full-chain restore tests. Use when SureBackup, check, or verify jobs are green but production restores break. Not for verification jobs that already report errors.
Fixes a least privilege review that keeps showing stale AWS IAM users with old access keys by working from a fresh credential report, deactivating unused keys and removing dormant users. Use when the same stale users reappear every cycle. Not for service accounts with owners who still use their keys.
A plain-English explainer for adyen 3d secure 2: what 3D Secure 2 is, how Adyen runs the frictionless and challenge authentication flows, when fraud liability shifts to the issuer, and how PSD2/SCA exemptions keep low-risk payments frictionless. Use when you need to understand Adyen 3DS2 before integrating. Not for st…
Which log fields actually matter for security work: the six core fields (UTC timestamp, identity, source IP, action, resource, result), correlation IDs across services, and the auth-specific extras, with jq commands to verify your logs. Use when designing logging for a new service, writing a logging standard, or fixin…
Shows how to fix retire an agent process layer without breaking hidden consumers, and prove the replacement loop. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
A step-by-step skill for keeping webhook and fetch-URL features from reaching internal services: URL validation, DNS checks, redirect handling, and egress controls. Use when an agent builds or reviews webhooks, URL previews, or any 'fetch this URL for me' feature. Triggers: 'SSRF prevention', 'webhook security', 'vali…
Shows how to fix make absence-based deletions reversible: soft marking, grace windows and post-incident repair. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix fail-closed path detection in outbound JSON with escape decoding and hostile-input budgets. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix crash-safe ownership journal for installer-managed settings entries. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix close timestamp groups before advancing timestamp-only event cursors. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix recover an expired event page cursor from a proven replay boundary. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix egress path filter review corrections: keys, decoding gate, telemetry, false denials, one scratch pipeline. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix derive a global frontier from retried paginated partitions. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix versioned Idempotency Across Canonicalization Rollouts. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.
Shows how to fix crash-safe ownership journal for installer-managed entries in a shared settings file. Use it when you hit this exact problem. Skip it when your error message or symptom looks different.