---
title: "Latest reads"
description: "The engineering internet, summarised so you can actually read it."
---

# Latest reads
> The engineering internet, summarised so you can actually read it.

## Articles

### [What is new in PostgREST v11.1?](https://yomu.fyi/post/what-is-new-in-postgrest-v11-1.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: steve\_chavez
- Published: Jul 12, 2023
- Type: Announcement

PostgREST v11.1 is available on the Supabase platform with configuration and querying improvements, plus a small set of documented breaking changes from v10. It lets JWT-authenticated impersonated roles such as anon, authenticated, and service\_role receive ALTER ROLE settings, including statement timeouts, pg\_plan\_filter statement cost limits, and configurable transaction isolation levels. The release also supports bulk JSON inserts that preserve column defaults when defaultToNull is false, and adds any/all modifiers for several filters, including eq, like, ilike, and comparison filters. For HTTP clients outside Supabase libraries, Range is now ignored on non-GET requests and RPC requests no longer use the deprecated Prefer: params=multiple-objects header; existing Supabase projects can upgrade by pausing and unpausing.


### [Tokenized Tokens](https://yomu.fyi/post/tokenized-tokens.md)
- Company: [Fly.io](https://yomu.fyi/company/fly-io.md)
- Published: Jul 12, 2023
- Type: Problem & solution

Fly.io describes a security problem in its Rails-based platform: as the application accumulated secrets, Rails became the part of the attack surface least trusted, yet still handled many operations involving bearer tokens. It compares model encryption, Vault or KMS, and narrowly scoped secret-handling services, noting that each leaves gaps or creates operational overhead when secrets must be read for arbitrary third-party APIs. The proposed Tokenizer is a stateless HTTP proxy holding a Curve25519 private key; encrypted secrets travel in Proxy-Tokenizer headers, and the proxy injects plaintext or computes HMACs while host allowlists constrain misuse. A companion SSOkenizer performs OAuth2 flows outside Rails, tokenizes resulting bearer tokens, and returns credentials usable only through Tokenizer. The tools are open source, and the design provides a path for third-party integrations and SSO without adding raw secrets to Rails.


### [How Ramp builds customer-first AI](https://yomu.fyi/post/how-ramp-builds-customer-first-ai.md)
- Company: [Ramp](https://yomu.fyi/company/ramp.md)
- Author: Yunyu Lin
- Published: Jul 11, 2023
- Type: Explainer

Ramp describes principles for building customer-focused AI, contrasting embedded outcomes with superficial chatbot experiences it calls “AI washing.” The approach emphasizes integrating models into workflows, separating general models trained on aggregated and masked data from sensitive models that use private customer data temporarily through in-context learning, and requiring explicit opt-in for sharing contract data. It prioritizes user control and feedback over lengthy explanations, while using guardrails that constrain outputs through predefined interactive data blocks rather than relying only on censorship filters. Ramp cites contract term extraction, spend intelligence, pricing benchmarks, Copilot, and Jsonformer as examples of these practices. The stated goal is AI that saves customers time and money while protecting privacy and producing safer, more useful results.


### [Fly.io ❤️  Bun](https://yomu.fyi/post/fly-io-bun.md)
- Company: [Fly.io](https://yomu.fyi/company/fly-io.md)
- Published: Jul 11, 2023
- Type: Announcement

Fly.io is preparing support for Bun as Bun 1.0 approaches, expanding beyond its ongoing Node.js work because Bun aims for complete Node.js API compatibility. With flyctl 0.1.54 and @flydotio/dockerfile 0.3.3, users can launch and deploy Bun applications through fly launch and fly deploy if Bun 0.5.3 or later is installed and package.json includes an eligible start, module/type, or main configuration. The post says applications following Bun’s Quickstart and Fly’s hands-on walkthrough can be deployed, and provides a sample. Support is beta, with noted compatibility issues including bun install lacking --prune, unsupported throwIfNoEntry in fs.statSync, and readline-based programs failing to exit; shared Dockerfile generation means fixes for either runtime generally benefit both.


### [Zero traffic cost for Kafka consumers](https://yomu.fyi/post/zero-traffic-cost-for-kafka-consumers.md)
- Company: [Grab](https://yomu.fyi/company/grab.md)
- Author: Fabrice Harbulot
- Published: Jul 7, 2023
- Type: Problem & solution

Grab's real-time data streaming platform team reduced infrastructure expenses by enabling Kafka consumers to fetch from the closest partition replica instead of partition leaders. The platform previously operated across three AWS Availability Zones with three-way replication, resulting in cross-AZ network fees that constituted half of the Kafka platform's total cost. To address this, the team performed a zero-downtime upgrade to Kafka 3.1, configured a rack-aware replica selector using AWS Availability Zone IDs, and updated consumer SDKs to populate the client rack parameter. The rollout produced a 25% drop in cross-AZ traffic within three months under steady data volumes. However, the change increased end-to-end latency by up to 500ms, created potential CPU load skews across zones, and removed graceful isolation during broker rotation maintenance.


### [Supabase Beta June 2023](https://yomu.fyi/post/supabase-beta-june-2023.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: ant\_wilson
- Published: Jul 6, 2023
- Type: Announcement

Supabase’s June 2023 beta update announces product, tooling, authentication, billing, and community developments. Mozilla chose Supabase Vector and OpenAI for AI Help, an AI chatbot that supports search and discovery for MDN, while Supabase Auth added native Sign in with Apple and Google support for one-tap methods including web integrations and Chrome extensions. The Supabase CLI added Dashboard migration visibility with executed SQL, local serving for all Functions, and a usage flag for monitoring key Postgres statistics; Studio also gained usage, overage, plan-limit, subscription, billing, and compute-detail improvements. Other updates include Kakao login, a Realtime Inspector for testing endpoints with JWTs and Row Level Security policies, an object ID in Storage upload responses, OrioleDB parallel index builds, database partitioning guidance, community projects, and an upcoming Launch Week.


### [LiteFS Cloud: Distributed SQLite with Managed Backups](https://yomu.fyi/post/litefs-cloud-distributed-sqlite-with-managed-backups.md)
- Company: [Fly.io](https://yomu.fyi/company/fly-io.md)
- Published: Jul 5, 2023
- Type: Announcement

LiteFS Cloud, launched in preview, adds managed backups and restores to LiteFS, an open-source distributed SQLite database that replicates data across application-cluster nodes. Existing LiteFS users had to create snapshots, choose retention, and accept restoration points limited by snapshot frequency; the service instead provides an equivalent snapshot every five minutes and restores within the last 30 days at five-minute granularity. Setup requires LiteFS 0.5.1 or later, a dashboard-created cluster, and an auth token, after which backups are automatic and dashboard restores use the latest snapshot before a selected timestamp. Its LTX format stores changed database pages, while multi-level compactions combine daily snapshots, hourly changes, and five-minute intervals so a restore can stream-merge a minimal set of files. To improve async replication’s durability trade-offs, the primary batches changes, LiteFS Cloud persists them in S3, and a high water mark prevents local transaction files from being removed before storage confirmation.


### [Go module proxy at Grab](https://yomu.fyi/post/go-module-proxy-at-grab.md)
- Company: [Grab](https://yomu.fyi/company/grab.md)
- Author: Jerry Ng
- Published: Jun 30, 2023
- Type: Problem & solution

Grab's 69.3 GiB multi-module Go monorepo caused commands like go get to take over 18 minutes as Git repeatedly traversed commit history, downloaded large worktrees, and overloaded their GitLab VCS infrastructure. To bypass direct VCS queries without losing automatic updates for external repositories, the team deployed the Athens Go module proxy configured in fallback network mode. They used the GOVCS environment variable to disable Git access specifically for the monorepo path, forcing Athens to fall back to its internal object storage when resolving monorepo modules. A dedicated CI pipeline pre-populates and refreshes the Athens cache whenever new monorepo modules are released. This setup reduced monorepo go get execution times to approximately 12 seconds and allowed a 70% scale-down of the Athens proxy cluster.


### [How to Take Your Enterprise](https://yomu.fyi/post/how-to-take-your-enterprise.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Aaron Parecki
- Published: Jun 29, 2023
- Type: Announcement

This installment in a Devday23 presentation series addresses how to move an enterprise-ready SaaS application beyond its MVP. It focuses on the functionality needed to help an application stand out to enterprise customers, including user provisioning and automation that can scale. The stated goal is to support growth from a working MVP toward enterprise adoption. Aaron Parecki shared material on Okta Workflows, provisioning, SaaS application maturity, and SCIM, with links to a SCIM developer video and Workflow Connector Builder tutorials. The broader series also points to upcoming coverage of authentication mechanisms and deployment automation, positioning enterprise readiness as an ongoing progression rather than a single feature.


### [Native Mobile Auth Support for Google and Apple Sign in](https://yomu.fyi/post/native-mobile-auth-support-for-google-and-apple-sign-in.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: stojan,tyler\_shukert
- Published: Jun 27, 2023
- Type: Announcement

Supabase has expanded its authentication support for native Apple and Google sign-in on iOS and Android, addressing a flow that previously required developers to send users through a web browser. Native apps built with Flutter or React Native can use OS-provided authentication dialogs across Apple platforms including iOS, macOS, tvOS, and watchOS, while Android support covers all Android variants. Behind these methods, ID tokens issued by Apple or Google are validated by Supabase Auth to create accounts or link existing accounts based on email similarity. The same signInWithIdToken() method also enables Sign in with Apple JS, Google One Tap, and authentication in Chrome extensions; the Google One Tap example passes the provider’s credential and a matching nonce when one is supplied via data-nonce.


### [How to Build an Enterprise](https://yomu.fyi/post/how-to-build-an-enterprise.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Team Okta
- Published: Jun 27, 2023
- Type: Announcement

Enterprise customers want employees to use a centralized authentication process called Single Sign On (SSO). This post introduces an enterprise-ready Devday23 presentation series focused on what enterprise readiness means, what enterprises look for, and how to build an enterprise-ready MVP SaaS application. Its identity-focused material explains the role of SSO in SaaS applications and points readers to Dan Marma, Product Acceleration Principal Architect, for the “Single Sign On (SSO) in your SaaS applications” presentation. The series will also cover moving an application beyond identity MVP toward elevated authentication mechanisms in later posts. It invites questions and continued content through Twitter and YouTube.


### [We Raised A Bunch Of Money](https://yomu.fyi/post/we-raised-a-bunch-of-money.md)
- Company: [Fly.io](https://yomu.fyi/company/fly-io.md)
- Published: Jun 27, 2023
- Type: Announcement

Fly.io announces $25MM from A16Z and existing investors followed by $70MM led by EQT Ventures, and uses the occasion to explain its platform vision. Its central problem is the “two hour” barrier: ordinary tooling makes global deployment, VMs, real-time features, encryption, and clustered databases too difficult to pursue quickly, leaving many applications concentrated in us-east-1. The company’s approach is to build a hardware-backed platform and toolchain spanning many regions, with Fly Machines making on-demand VM creation as straightforward as a function call. Funding will support 33 regions, support and reliability, advanced storage, security capabilities, and new hardware while preserving a self-service experience for containerized applications. The stated user-facing promise is that an existing Docker container can run on Fly.io in single-digit minutes and reach every continent in another minute or two.


### [Go From 0 To 1 To Enterprise-Ready With MongoDB Atlas And LLMs](https://yomu.fyi/post/go-from-0-to-1-to-enterprise-ready-with-mongodb-atlas-and-llms.md)
- Company: [MongoDB](https://yomu.fyi/company/mongodb.md)
- Published: Jun 22, 2023
- Type: Explainer

Generative AI applications require grounding in up-to-date operational data to avoid incorrect or uninformed answers, yet moving from prototype to enterprise-ready production is a significant challenge. MongoDB Atlas unifies operational, analytical, and vector search data services, enabling developers to provide long-term memory to large language models without costly fine-tuning. The post presents five resources for integrating MongoDB Atlas with LLMs, including tutorials for Atlas Vector Search with OpenAI, LlamaIndex, LangChain, MindsDB, and HuggingFace. These integrations support semantic search, chat applications with proprietary data, prediction generation, and automated reactions to data changes via serverless triggers. MongoDB Atlas offers a flexible document model, high performance, and scalability, validated by enterprises, to accelerate building production-ready generative AI applications.


### [How to Add Authentication to .NET MAUI Apps](https://yomu.fyi/post/how-to-add-authentication-to-net-maui-apps.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Laura Rodríguez
- Published: Jun 21, 2023
- Type: Tutorial

This tutorial shows how to add Okta-based authentication to a .NET MAUI application, covering project setup, OpenID Connect configuration, sign-in, sign-out, and platform integration. It uses IdentityModel.OidcClient, an OktaClient wrapper, an OktaClientConfiguration class, and a WebBrowserAuthenticator implementation to connect the application to Okta’s browser-based authorization flow. The walkthrough creates a native OIDC client with the Okta CLI, registers redirect and logout URIs using myapp://callback, configures dependency injection, and updates the UI to display claims after login. For Android, it adds a WebAuthenticationCallbackActivity with an intent filter for the myapp scheme and enables Custom Tabs visibility in AndroidManifest.xml. The post includes troubleshooting for NuGet configuration and runtime-pack errors, but notes that the Okta CLI was deprecated and the original instructions no longer work exactly as written after the May 2025 plan change.


### [What Enterprises Look For: Devday23 Enterprise Customer Perspectives](https://yomu.fyi/post/what-enterprises-look-for-devday23-enterprise-customer-perspectives.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Team Okta
- Published: Jun 15, 2023
- Type: Announcement

Moving a SaaS application from B2C or small-company B2B customers to enterprise customers raises questions about whether enterprise buyers have different expectations. This installment of the Devday23 enterprise-ready presentation series focuses on what enterprises look for when selecting SaaS applications, with particular attention to identity and how customers would use the application. The WIC Devday 23 virtual conference addressed the topic through a presentation by Jon Lehtinen, director for “Okta on Okta” products at Okta. The broader series also covers enterprise readiness, authentication considerations, user management, authentication mechanisms, building an enterprise-ready MVP SaaS app, and taking that app beyond MVP, while the supplied text does not provide the presentation’s specific answers or conclusions.


### [What Does It Mean to Be Enterprise Ready: Devday23 Keynote](https://yomu.fyi/post/what-does-it-mean-to-be-enterprise-ready-devday23-keynote.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: Team Okta
- Published: Jun 13, 2023
- Type: Announcement

What makes a SaaS application ready for enterprise customers when identity is involved? This Devday23 keynote introduces enterprise readiness as a concern spanning application security, user onboarding, scalable authentication, identity, user management, and automation. Arnab Bose, Chief Product Officer for Workforce Identity Cloud at Okta, leads the presentation’s “Why” and “What” questions in a half-day virtual conference hosted at WIC Devday 23. The keynote is positioned as the opening of a series covering enterprise customer expectations, building an enterprise-ready MVP, moving beyond MVP, authentication considerations, user management, and stronger authentication mechanisms; a related “Setting the Bar for Enterprise-Grade Identity” whitepaper provides benchmarks for secure SaaS management.


### [Charting a path to AI accountability](https://yomu.fyi/post/charting-a-path-to-ai-accountability.md)
- Company: [Anthropic](https://yomu.fyi/company/anthropic.md)
- Published: Jun 13, 2023
- Type: Explainer

Anthropic’s response to the NTIA’s Request for Comment on AI Accountability proposes processes and infrastructure for evaluating highly capable and general-purpose AI models. It recommends funding rigorous evaluations, requiring near-term disclosure of evaluation methods and results, and developing longer-term industry standards with agencies such as NIST. The framework would use capability-based risk thresholds, pre-registration of large training runs, confidential registries, technically literate and security-conscious third-party auditors, and external red teaming before advanced model release. It also calls for more interpretability research, acknowledges that regulations requiring interpretable models are currently infeasible, and seeks antitrust guidance for industry safety collaboration. Anthropic says these measures require collaboration among researchers, AI labs, regulators, auditors, and other stakeholders to build accountability and auditing mechanisms that support safe development and deployment.


### [Prompt design](https://yomu.fyi/post/prompt-design.md)
- Company: [Cursor](https://yomu.fyi/company/cursor.md)
- Author: Arvid Lunnemark
- Published: Jun 11, 2023
- Type: Explainer

The post argues that “prompt design” better describes prompt construction than “prompt engineering,” comparing it with web design. It frames prompts as clear communication with dynamic inputs that must adapt to changing content and context-window limits, then identifies shared practices such as inspecting rendered output, using composable declarative components, and pursuing precise formatting. For LLM agents, the analogy extends to interactive websites whose prompts re-render after function calls, although text-only output and caching constraints differ. This perspective motivates Priompt, a React-like, JSX-based library used internally at Cursor, with a preview site that renders prompts using real request data and serialized props; the author considers JSX more ergonomic than string templates while noting that model capabilities and platform abstractions may weaken the analogy over time.


### [Supabase Beta May 2023](https://yomu.fyi/post/supabase-beta-may-2023.md)
- Company: [Supabase](https://yomu.fyi/company/supabase.md)
- Author: ant\_wilson
- Published: Jun 9, 2023
- Type: Announcement

Supabase’s May 2023 update announces two major product areas: Supabase Vector, an open-source toolkit for storing, indexing, and querying Postgres vector embeddings at scale, and Supabase Vault, a Postgres extension and UI for encrypted secrets and data. Auth Helpers now support client and server use of the Next.js App Router and server-side authentication by default with PKCE. The release also adds Turnstile CAPTCHA support, password reauthentication nonces, Wrappers integrations for Firebase, Stripe, S3, and clickhouse, CLI deployment for all Edge Functions, custom and vanity domains, and generally available Image Transformation. Supabase says it reached 50,000 GitHub stars, while the team solicits Dashboard SQL Editor feedback and reports community projects, AI resources, and a first-ever Flutter Hackathon.


### [Unlock Identity Expertise with Our New Developer Podcast!](https://yomu.fyi/post/unlock-identity-expertise-with-our-new-developer-podcast.md)
- Company: [Okta](https://yomu.fyi/company/okta.md)
- Author: E. Dunham
- Published: Jun 8, 2023
- Type: Announcement

Okta’s Workforce Developer Advocacy Team has launched a monthly Workforce Identity Developer Podcast for education about identity and development for customers using Okta as their identity provider. The first highlighted episodes cover Workforce Identity, security history, phishing-resistant MFA, and the relative benefits and drawbacks of WebAuthN and Passkeys; another compares OAuth application integrations with older SSWS tokens. A further episode discusses building SaaS for enterprise customers, including the “Enterprise-Ready MVP,” broadening “Okta Developers” to people building code for Okta customers, and extreme enterprise use cases. Audio is available on Casted, while new content and feedback are supported through social channels, YouTube, and comments on the developer forum.


[Newer posts](https://yomu.fyi/posts/page/193.md) · [Older posts](https://yomu.fyi/posts/page/195.md)