Article URL: https://blog.marcua.net/2026/07/31/authorize-dont-authenticate.html Comments URL: https://news.ycombinator.com/item?id=49123468 Points: 33 # Comments: 8
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
In microservices architecture, each service owns its own database, making cross-service ACID transactions impossible — a problem the Saga pattern is designed to solve. The Saga pattern breaks a workflow into a sequence of local transactions, where each step triggers the next via events, and any failure triggers compensating transactions to undo prior steps. Two main approaches exist: Choreography, where services react to each other's events in a decentralized manner, and Orchestration, where a central coordinator directs each service and tracks overall saga state. Choreography offers loose coupling and horizontal scalability, while Orchestration provides clearer audit trails and easier debugging at the cost of a potential single point of failure. Key trade-offs of the Saga pattern include eventual consistency between steps, complex compensating logic, and the requirement that every step be idempotent to handle retries safely.
A growing debate in the software industry questions whether Model Context Protocol (MCP) servers will eventually become a standard requirement for SaaS products, much like REST APIs did in the past. While REST APIs were designed for developers who can read documentation and chain requests, AI agents require structured, discoverable tool descriptions — something MCP is built to provide. Analysts and developers argue that MCP does not replace REST APIs but instead adds a new interface layer that makes existing APIs understandable to AI systems. As AI assistants like ChatGPT and Claude become embedded in everyday workflows, businesses face pressure to ensure their products are accessible to these agents without building separate integrations for every platform. Experts suggest that companies with existing OpenAPI specifications are already well-positioned to adopt MCP, though the technology may not yet be necessary for products with no AI-agent use case.
A developer building AgentEval Forge, an open-source evaluation lab for AI agents, found that agent evaluation is fundamentally different from standard model evaluation. While model evaluation focuses on whether an output is correct, agent evaluation must assess the entire decision-making process, including tool selection, retries, cost, and recovery behavior. An agent can produce an acceptable final answer while taking inefficient, risky, or wasteful steps along the way, meaning final-output scoring alone can mask serious problems. The developer argues that the path an agent takes matters as much as — or more than — the endpoint, since cost, safety, and trust are determined during execution, not just at the result. This insight emerged not from research papers but from the practical challenges encountered while designing scenario packs, trajectory scoring, and regression tracking for real agent workflows.
A solo developer has launched Rovian, an open-beta chess platform that streams live webcam feeds of both players during a match, aiming to recreate the face-to-face tension of over-the-board play. The creator argues that existing platforms like Lichess and Chess.com, while technically strong, strip away the human element by reducing opponents to usernames and ratings. Rovian is built on Next.js with chess.js for game logic and runs Stockfish compiled to WebAssembly entirely client-side to keep server costs manageable. A key engineering challenge was synchronizing peer-to-peer video with server-authoritative game state, which the developer resolved by introducing a slight board-render buffer rather than delaying the video feed. The platform currently uses labeled training bots to fill empty matchmaking slots during off-peak hours, with the developer noting that peak activity occurs around 21:00 Istanbul time.
Discussion (0)
Log in to join the discussion and vote.
Log in