BLACKBOX Uses a FalkorDB Knowledge Graph to Give Incident Response a Memory

·5 views

BLACKBOX is an AI-powered incident investigation agent designed for SRE and on-call teams. It uses FalkorDB as a persistent knowledge graph linking services, dependencies, alerts, deployments, runbooks, owners, and past postmortems. By traversing these connections, it can trace likely root causes, assess blast radius, and identify relevant experts with an explanation of the reasoning path. Findings from each investigation are written back into the graph, so future incidents with similar patterns can draw on stored context and reach answers faster. The developers argue that graph representation suits operational systems better than flat documents or isolated tables.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Claude Code Fixes Four Shell Variable Cases That Bypassed Its Permission Checks

Between October 3 and 9, Claude Code's official changelog recorded four fixes for cases where shell variables let commands slip past its permission rules. In two cases, deny or ask rules failed to catch the command, particularly under sandbox auto-allow mode. In the other two, the auto-approval check permitted commands that should have prompted the user. The changelog does not explain who discovered the issues or how the checker failed internally. The article notes that the underlying problem is that text-based rule matching must predict how the shell will expand variables and split words before execution.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

ColumnCheck: Local CSV Review Tool with Human Overrides for Freelancers

ColumnCheck is a small offline command-line tool that helps freelancers review messy CSV exports, such as invoices, before importing them elsewhere. It suggests column types from headers using a scikit-learn classifier and applies fixed validators for emails, ISO dates, decimal amounts, and whole-number quantities. Users can override suggestions through a JSON mapping, and reports preserve the original model output while flagging the override. The tool produces JSON and HTML reports without modifying the source file or making network calls. The developer notes it is a functional prototype and that its business demand and performance advantage over simple rules remain unvalidated.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Kubernetes Token Rotation Leaves Old Tokens Valid; Bound Marker Secrets Offer a Fix

A common assumption is that rotating a Kubernetes service account token invalidates the previous one, but TokenRequest-issued tokens remain valid until their expiry claim. The author, who works on the zenxPAM access platform, describes a fix using the boundObjectRef feature, which ties a token to an object so it stops working when that object is deleted. Because no Pod exists for external workloads, they use a dedicated marker Secret as the anchor. In lab tests on a single-node k3s cluster, revoked tokens were refused roughly 9 to 11 seconds after deletion, reflecting the API server's authentication cache. The design adds two alternating marker slots per identity, a verification step using SelfSubjectReview before switching, and compensating rollback on failure.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Closing a Terminal Sends Coding Agents SIGHUP; Session Hosts Can Keep Them Running

Closing a terminal window can kill a coding agent that is running in it, because the kernel signals the shell that the terminal has hung up. The shell then forwards that signal to its background jobs, so unsaved work in the agent process is lost. Common workarounds such as nohup, disown, setsid, and tmux each address a different part of this chain. Only some of them leave the agent attached to a terminal the user can reconnect to. The article shows how to inspect process groups, sessions, and terminal ownership with ps to see what will be affected.

0 comments Read more at DEV Community