← Home ← Codex ← DEBT ← Engine
Browse by Category
+ added · updated 7d
✦ This isn't a glossary anymore

A curated knowledge graph with editorial governance

A typical glossary gives you terms, definitions, and a search box. This goes further.

Terms are connected by reviewed, typed relationships, making it possible to follow how ideas relate across the entire corpus. Every connection is sourced, reviewed, and tracked, while the system continuously checks for missing links, dead references, and gaps in coverage.

The result is less a glossary and more a curated knowledge graph — designed not just to define concepts, but to show how they connect.

Honestly, we've stopped trying to pin down exactly what this is — and it's still being built. Depending on the day it reads like an Engineering Knowledge Operating System, a Curated Engineering Knowledge Graph, or an AI-Native Developer Knowledge Base, with a Blast Radius risk layer wiring in now. It's quietly becoming all of them — tap a ? to see what each means.

We're not quite sure what to call it — but it outgrew “glossary” a while ago.

The most ambitious framing: not a reference you read, but a substrate other tools run on. 819 reviewed, typed relationships bind the corpus into one coherent layer — alongside four-axis risk scores and editorial governance — that people browse and machines query. Engineering knowledge that's stored, connected, checked, and acted on all in the same place.
At its core it's a graph: 1,519 engineering concepts joined by reviewed, typed relationships. Every edge is sourced and tracked, every term scored on a four-axis risk model, and the whole corpus is continuously audited for missing links, dead references and gaps in coverage — closer to a maintained dataset than a wiki.
Built to be read by models as much as by people. The corpus is machine-readable end to end — typed edges, structured fields, an agent-sync layer, a deterministic assistant that answers from the graph instead of guessing, and 18 mediated narratives that walk through how distant concepts connect — so an LLM can traverse it the way a developer would.
The layer wiring in now. Every term already carries a four-axis risk score; Blast Radius teaches the graph to trace how that risk travels along its connections — turning isolated scores into a blast radius that shows how far a concept's risk actually reaches. Risk-graph readiness is at 40% and climbing as more connections are reviewed.
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
2FA Bypass Techniques PHP 5.0+
Common ways attackers circumvent two-factor authentication — SIM swapping, real-time phishing proxies, SS7 attacks, backup code theft, and session cookie hijacking after authentication.
d9 Security advanced
AI Context Management PHP 8.0+
The practice of selecting, ordering, and trimming what goes into an LLM's context window to maximise relevance while staying under token limits.
d9 AI / ML intermediate
AI Model Quantization
Compressing neural network weights and activations to lower-precision formats (int8, int4, fp8) to shrink memory and accelerate inference.
d9 AI / ML advanced
AI Model Selection Criteria
The systematic factors engineers weigh when choosing an LLM for a task: capability, cost, latency, context window, modality, hosting, and licensing.
d9 AI / ML intermediate
AI Synthetic Data Generation
Using generative models to produce artificial training, testing, or augmentation data that mimics the statistical properties of real datasets without exposing originals.
d9 AI / ML intermediate
Apache Kafka Concepts 🧠 1
Kafka is a distributed log — producers append to immutable, ordered topics partitioned for parallelism, consumers read at their own pace and replay from any offset.
d9 Messaging intermediate
Apache Kafka Fundamentals PHP 7.0+
A distributed event streaming platform that stores messages as an immutable ordered log partitioned across a cluster — optimised for high-throughput, durable, replayable event streams rather than traditional task queues.
d9 Messaging advanced
At-Least-Once Delivery 🧠 2
At-least-once delivery guarantees a message is delivered to at least one consumer, possibly multiple times — consumers must be idempotent to handle duplicates safely.
d9 Messaging intermediate
Authorisation PHP 7.0+ 🧠 4
The process of determining what an authenticated user is permitted to do — checking permissions, roles, or policies before allowing access to a resource or action.
d9 Security intermediate
BigInt — Arbitrary Precision Integers ES2020
JavaScript's Number type cannot safely represent integers larger than 2⁵³−1 (Number.MAX_SAFE_INTEGER). BigInt is a separate numeric type that handles integers of arbitrary size, essential for working with 64-bit IDs from databases, cryptographic values, and precise financial calculations.
d9 JavaScript intermediate
Blameless Culture
An organisational norm where incidents and mistakes are treated as systemic learning opportunities rather than individual failures deserving punishment.
d9 General beginner
Blameless Post-Mortem PHP 5.0+ 🧠 3
A structured review of an incident focused on systemic causes and improvements, not individual blame — making it safe to surface failures.
d9 DevOps intermediate
Diagram: Bloom Filter Bloom Filter PHP 7.0+
A probabilistic data structure that tests set membership in O(1) time and O(1) space, with a tunable false-positive rate and zero false negatives.
d9 Data Structures advanced
BM25 Ranking
Best Match 25 — the industry-standard relevance ranking algorithm used by Elasticsearch, Lucene, and SQLite FTS5, refining TF-IDF with better document length normalisation and a term frequency saturation parameter.
d9 Search intermediate
Boy Scout Rule 🧠 1
Always leave the codebase slightly cleaner than you found it — small, consistent improvements prevent entropy accumulation.
d9 Code Quality beginner
Brooks's Law
"Adding manpower to a late software project makes it later" — new developers require onboarding time and increase communication overhead before contributing productively.
d9 General intermediate
Diagram: Bulkhead Pattern Bulkhead Pattern
Isolating system components into separate resource pools so a failure in one doesn't cascade and exhaust resources for others.
d9 Architecture advanced
Business Logic Abuse
Exploiting flaws in application workflows rather than technical vulnerabilities — bypassing payment steps, abusing discount codes, manipulating quantity fields, or racing concurrent requests.
d9 Security advanced
Business Logic Vulnerability 🧠 1
Flaws in application workflow allow attackers to abuse legitimate features in unintended ways.
CWE-840 OWASP A4:2021
d9 Security advanced 7.5
Diagram: Cache Stampede / Thundering Herd Cache Stampede / Thundering Herd PHP 5.0+
When a cached item expires, multiple simultaneous requests all miss the cache and hit the database concurrently, overwhelming it.
d9 Performance advanced
✓ schema.org compliant