All posts
All 758 foreign keys said they were enforced. None of them were.
We scanned a 344-million-row MusicBrainz copy. Every declared foreign key came back NOT VALID — the constraint exists, and PostgreSQL is not checking it.
One reader in five read an empty report as "everything is fine"
We put a database report in front of real readers. The dangerous failure was not a wrong number — it was a report with nothing in it being read as good news.
We fired 32 prompt injections at our own product. Eight got through.
What happened when we aimed 32 prompt-injection attempts at our own live question path, and why we are not shipping the filter that would catch them.