VITI Labs Proposes Replacing IT Change Approval Meetings With Automated Policy-as-Code Gates

·2 views

VITI Labs, the editorial and research team behind VITI Magazine, argues that traditional enterprise IT governance, including CAB meetings and lengthy Word-based policies, creates an illusion of control. The group advocates its Business Impact Governance Framework, which enforces policy through deterministic code rather than documentation. It published a matrix mapping ISO 27001, DORA, and NIS2 requirements to example runtime rules, such as blocking unencrypted databases and unsigned artifacts. According to the post, these automated gates would also generate immutable audit records for regulators. The authors contend that resistance to this approach stems from bureaucratic interests rather than technical limitations.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Editing a running Bash script in place can crash or misexecute it

A developer reported that adding a comment to a shell script that was actively running caused a sixteen-minute job to fail with a syntax error. Bash keeps a byte offset into the open file rather than a line number, so changing the file mid-execution makes it resume at the wrong position. A simple demonstration showed a stray command running and a line executing a second time. The fix is to write a new version to a temporary file in the same folder and rename it over the original, since a running process holds the old file by its inode. In-place write methods such as shell redirects are the ones that cause this problem.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Fragmented school attendance records cause morning confusion, argues data-consistency case

A DEV Community piece contends that school attendance problems stem from the same student-presence fact being recorded across paper registers, staff chats, and office spreadsheets without syncing. The author frames this as a distributed-systems issue lacking a single source of truth, with humans acting as the message bus. Suggested fixes include one authoritative attendance record tied to a stable student ID, marking at first-period roll-call, and typed statuses such as absent, late, or leave. The article also promotes OROO Campus, a free school ERP platform, as a tool to centralize attendance alongside other school management functions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

System Design Basics: Scaling, Sharding, and the Trade-offs Architects Face

A startup's single-server API handled early growth well, but a viral surge tripled traffic and repeated vertical upgrades eventually hit a hardware ceiling. The resulting single point of failure caused a six-hour outage on the company's busiest day. The article explains that vertical scaling is simple but limited, while horizontal scaling has no fixed ceiling yet requires stateless applications and a different architecture. It also covers load balancing and the practical advice to scale vertically until costs rise, then design for horizontal distribution. The core message is that architectural choices must be made before traffic forces them.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Streaming Markdown in Vue: Rendering LLM Tokens Without Flicker

A DEV Community post by Simon He, published November 3, examines how to render streaming Markdown output from large language models inside a Vue application. The piece focuses on the flicker problem that can occur when tokens arrive incrementally and the interface re-renders the partially formed Markdown. It is tagged under Vue, AI, JavaScript, and web development. The article is listed with two reactions and an estimated reading time of five minutes. The source text provided is only a short excerpt, so the specific techniques and conclusions it proposes cannot be confirmed from this material alone.

0 comments Read more at DEV Community