正在加载内容...

963963 Chat Review Portal Independent coverage of news

A Field Guide to API Design

By Nina Alvarez · · 1247 words
A Field Guide to API Design

Before providing samples, ask how results will be delivered, how long they usually take and how the service protects your privacy. Confidentiality rules and access to records vary by country and age; confirm who can see the information, especially if you use shared devices, email or a patient portal. If a result needs follow-up, the service can explain what it means and direct you to appropriate care. This article cannot interpret an individual result or recommend treatment.

Queue Design: Serving static bytes is the cheapest thing you can do at the edge. Queue Design: A schema is an interface; changing it is a migration, not an edit. Queue Design: Track the denominator as carefully as the numerator.

API Design: If the rollback plan needs a meeting, it is not a rollback plan. API Design: Small pages that stay small are easier to keep fast than large ones made fast. API Design: Write the invariant down; otherwise it lives only in someone's memory.

Consider cloud infrastructure specifically. The interesting number is not the average, it is the 99th percentile. Cloud Infrastructure: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. That applies to cloud infrastructure as well.

If the rollback plan needs a meeting, it is not a rollback plan. The same reasoning holds for storage tiers. For storage tiers, the constraint matters more than the feature list. Small pages that stay small are easier to keep fast than large ones made fast. Teams working on storage tiers usually discover this the hard way. Write the invariant down; otherwise it lives only in someone's memory.

You can often replace a coordination problem with an idempotency key. The same reasoning holds for search indexing. For search indexing, the constraint matters more than the feature list. Anything that grows without a bound will eventually hit one. Teams working on search indexing usually discover this the hard way. Documentation that is not tested tends to describe the previous version.

Teams working on monitoring alerts usually discover this the hard way. If the rollback plan needs a meeting, it is not a rollback plan. Small pages that stay small are easier to keep fast than large ones made fast. This is most visible in monitoring alerts. Consider monitoring alerts specifically. Write the invariant down; otherwise it lives only in someone's memory.

Data Pipelines: The first thing to settle is the failure mode, not the happy path. Data Pipelines: Measurements taken once are anecdotes; you need a baseline that repeats. Data Pipelines: Costs usually concentrate in a small number of operations, so find those first.

Consider backup strategy specifically. You can often replace a coordination problem with an idempotency key. Backup Strategy: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. That applies to backup strategy as well.

The same principle applies to intimate images and messages. Ask before creating or sharing sexual material, and do not assume permission to send something privately includes permission to show or forward it to others. A person can set limits or withdraw permission for future sharing, although removing material already distributed may not be possible. Laws about intimate images differ by country and may have additional age-related rules. Check local official guidance before relying on a general explanation.

Access Control: A queue smooths spikes but also hides how far behind you are. Access Control: Retries without jitter turn a small outage into a large one. Access Control: Separating the reads from the writes buys room to change either side.

Access Control: The first thing to settle is the failure mode, not the happy path. Access Control: Measurements taken once are anecdotes; you need a baseline that repeats. Access Control: Costs usually concentrate in a small number of operations, so find those first.

Cloud Infrastructure: If a metric has no owner, it will drift until it causes an incident. Cloud Infrastructure: The cheapest optimisation is usually removing work nobody asked for. Cloud Infrastructure: Aggregating at write time trades flexibility for predictable read cost.

Teams working on storage tiers usually discover this the hard way. The interesting number is not the average, it is the 99th percentile. Adding a cache in front of a slow query is a fix; fixing the query is a cure. This is most visible in storage tiers. Consider storage tiers specifically. Every abstraction you add is a place where behaviour can differ from intent.

A check-up does not necessarily include a physical examination. Many screening visits rely on questions, urine or swab samples, and blood tests; an examination is considered when it is relevant to the person’s concerns or clinical assessment. Patients can ask what an examination involves and discuss consent before it begins.

A design that cannot be rolled back is a design that cannot be changed safely. The same reasoning holds for observability. For observability, the constraint matters more than the feature list. Latency budgets are easier to defend when every hop has a stated ceiling. Teams working on observability usually discover this the hard way. Caching helps only until the invalidation rules become the bottleneck.

The interesting number is not the average, it is the 99th percentile. The same reasoning holds for edge caching. For edge caching, the constraint matters more than the feature list. Adding a cache in front of a slow query is a fix; fixing the query is a cure. Teams working on edge caching usually discover this the hard way. Every abstraction you add is a place where behaviour can differ from intent.

Crawl Budget: Serving static bytes is the cheapest thing you can do at the edge. Crawl Budget: A schema is an interface; changing it is a migration, not an edit. Crawl Budget: Track the denominator as carefully as the numerator.

A queue smooths spikes but also hides how far behind you are. This is most visible in release process. Consider release process specifically. Retries without jitter turn a small outage into a large one. Release Process: Separating the reads from the writes buys room to change either side.

Observability: You can often replace a coordination problem with an idempotency key. Observability: Anything that grows without a bound will eventually hit one. Observability: Documentation that is not tested tends to describe the previous version.

Data Pipelines: Periodic jobs should be safe to run twice, because they will be. Data Pipelines: You rarely need a new component to fix a boundary problem. Data Pipelines: The signal you want is often already logged, just not aggregated.

Observability: Configurations should be reviewable in a diff, not only in a console. Observability: The best time to add an index is before the table gets large. Observability: Failures are usually correlated, so plan for the shared dependency.

Backup Strategy: The interesting number is not the average, it is the 99th percentile. Backup Strategy: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Backup Strategy: Every abstraction you add is a place where behaviour can differ from intent.

Cloud Infrastructure: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to cloud infrastructure as well. In practice, cloud infrastructure behaves differently: The signal you want is often already logged, just not aggregated.

Related reading