Dora Noda
Software Engineer
2304 posts · View all authors
Oxide's $445M SEC Form D: The Decade's Biggest On-Prem Hardware Bet and What It Says About Owning Your Machines
An August 4, 2026 SEC Form D shows Oxide Computer raised $445M six months after its $200M Series C — roughly $645M in half a year for cloud computers you own. What the filing actually says, where a €50 Hetzner box sits on the same ownership spectrum, and the deploy-experience layer the raise doesn't cover.
70% of Platform Initiatives Fail Without a Golden Path: Inside Vol. 4 of the State of Platform Engineering Report
The 518-engineer State of Platform Engineering Report Vol. 4 finds ~70% of internal platforms fail without a golden path, adoption cliffs from 80% to under 20%, and nearly 30% of teams measure nothing — here are the four metrics that fix it and the build-vs-adopt call the data forces.
OpenID Certified at 30 MB: What Pocket ID and Tinyauth's Formal OIDC Conformance Actually Proves for Your PaaS Admin Login
Pocket ID and Tinyauth both passed the OpenID Foundation's conformance suite in 2026. What the certification actually tests, what it doesn't prove, and when a 30 MB IdP is enough to gate a self-hosted PaaS admin surface.
Your PaaS Bill Grew a New Line Item: Fly.io's Snapshot Charges, Cross-Region Transfer Fees, and What a Multi-Region Indie SaaS Actually Pays Now
Fly.io began billing volume snapshots on January 1, 2026 — a meter attached to a default. A line-by-line accounting of what a multi-region indie SaaS (web, worker, cross-region Postgres replica) now pays on Fly.io and Railway, the cross-region transfer rates most users never priced, and why self-hosted costs can't grow lines you didn't write.
Railway's Five Postmortems in Six Months: What an 8-Hour Blackout From a GCP Account Suspension Reveals About Renting Your Platform's Platform
Railway's May 2026 blackout was caused by Google suspending the account the whole platform runs on — a failure mode no SLA or multi-AZ diagram covers. A close read of five postmortems, the hidden dependency chain of renting a PaaS, and an honest tally of what self-hosting removes from the failure tree versus what it adds to your pager.
Spend Caps Are a Feature Hosted PaaS Has to Build — and Owned Hardware Gets for Free
Railway's July 2026 CLI usage limits let you cap spend by taking your own app offline. A fixed-price Hetzner box makes the same guarantee for free — but owned hardware still owes its tenants quotas. The full economics of bill anxiety, with the numbers.
Static Outbound IPs Are a Paid PaaS Add-On — and a Rounding Error on a Server You Own
Railway's July 2026 release put static outbound IPs behind its Pro plan — the same allowlist-friendly egress identity that costs €0.50/month on a Hetzner box. A platform-by-platform accounting of the egress tax on Railway, Render, Heroku, and Fly.io versus servers you own.
Sprites Speak MCP: When the Agent Sandbox Becomes a Tool the Agent Calls Itself
Fly.io's Sprites now expose their full lifecycle over MCP, so agents provision disposable machines from inside their own loop. Here is the six-tool sandbox contract — create, exec, checkpoint, restore, destroy, list — and the quotas, TTLs, and per-tenant budgets a self-hosted platform needs before the agent becomes the capacity planner.
step-ca vs Let's Encrypt: What an Internal-Only ACME CA Buys Your Fleet's Service-to-Service TLS
Let's Encrypt logs every certificate publicly and refuses private hostnames by design. step-ca gives a Cluster API fleet automated internal TLS with 24-hour certs and no CT-log exposure — here's the full setup, plus the honest cost of running your own CA.