Concept Connection Atlas
Overview
Most technical curricula teach systems as silos: one chapter for virtual memory, one for database indexes, one for TCP. The exam then asks about each in isolation. Production systems and senior interviews do neither — they ask what a page cache, a DB buffer pool, and a CDN edge have in mechanism in common, and where that commonality stops. This atlas exists to answer that kind of question.
The unit of analysis here is the cross-domain connection, and every connection is held to the same five-part standard:
- Concepts stated independently. Each side of the connection is explained on its own, with just enough mechanism for the link to make sense. If you cannot state both concepts crisply, the connection is decoration, not understanding.
- The shared principle, named precisely. Not “these are similar” but something testable, e.g., “both are demand-filled caches with locality-driven eviction over a cost gradient” or “both compute a linear extension of a partial order induced by dependencies.” A well-named principle is a transferable tool: next time you meet an unfamiliar system, you can ask “which known principle does this instantiate?”
- Where the analogy HOLDS and where it BREAKS. Specific and technically honest. An analogy that never breaks is a definition, not an analogy. The breaking points are usually where the interview follow-up question lives (“but what about fan-out?”), and where real design mistakes happen (applying the cache-miss mental model to a page fault that costs 10,000× more).
- A concrete worked example, with numbers where possible. Mechanisms earn belief through arithmetic: a B+tree that fits a billion keys in 3 levels, an M/M/1 queue whose latency doubles per 10% of utilization near saturation.
- When the connection is useful. Problem-solving heuristics, interview answers, and real engineering decisions it unlocks — plus the decision it should not be stretched to.
Why this matters for engineering judgment. Mechanism transfer is how senior engineers reason about systems they have never operated. If you know that Git, Nix, Docker layers, IPFS, and content-hashed CDN assets all instantiate “hash the content, not the location,” then a new system described as “content-addressed” immediately implies immutability, cheap integrity checks, dedup, and cache-friendliness — and its costs (GC of unreferenced data, no in-place mutation) are implied too. Without the abstraction, each system looks like isolated trivia.
Why this matters for interviews. Interviewers escalate along the axis of abstraction, not trivia: “What is a B+tree?” (junior) → “Why a B+tree and not a skip list on disk?” (mid) → “What property of the storage medium makes fan-out the dominant term?” (senior). The third question is answered by the principle this atlas names in db-indexes-data-structures.md: data structures are shaped by the physics of the storage medium. The atlas pages are written so each can supply the top of that escalation chain.
Map of the Atlas
Forty-two connection pages, grouped by the kind of shared principle rather than by textbook silo:
CONCEPT CONNECTION ATLAS
=======================
ORDERING dependency-resolution ........ topo sort ~ make ~ npm ~ schedulers
HIERARCHY / CACHING virtual-memory-caching ....... demand paging ~ page cache ~ buffer pool ~ CDN
STORAGE PHYSICS db-indexes-data-structures ... B+tree ~ LSM ~ skiplist ~ columnar
QUEUES / DELAY scheduling-queueing .......... CPU schedulers ~ Kendall notation ~ CoDel
backpressure ................. bounded queues ~ TCP windows ~ Kafka pull ~ load shedding
FAILURE / PROTOCOL tcp-distributed-failure ...... RTO ~ retries ~ idempotency ~ failure detectors
CONTENT ADDRESSING git-cas ...................... Git ~ Nix ~ Docker ~ IPFS ~ restic
ORDERING CONTRACTS transactions-concurrency ..... 2PL ~ RW locks ~ MVCC ~ isolation ~ memory models
LIFETIMES gc-memory-management ......... reachability ~ refcounts ~ generations ~ leases
EVENT LOGS event-sourcing-wal ........... git log ~ WAL ~ event sourcing ~ CDC ~ audit trails
REPLICATED COPIES cache-coherence-consistency .. MESI ~ invalidation ~ CDN purge ~ replicated consistency
OPTIMIZER DAGS query-planner-dataflow ....... compiler passes ~ query planner ~ Flink DAGs ~ build graphs
REDUNDANCY checksums-erasure-coding ..... checksums ~ RAID parity ~ Reed-Solomon ~ hashes ~ ECC
COORDINATION consensus-leases ............. Raft ~ distributed locks ~ leases ~ fencing tokens
EVENT DISPATCH interrupts-async ............. IRQs ~ signals ~ epoll ~ event loops ~ futures
INVALIDATION incremental-computation ...... make ~ spreadsheets ~ incr. compilers ~ matviews ~ React
ADDRESSING / ROUTING dns-cdn-routing .............. DNS hierarchy ~ anycast ~ GeoDNS ~ CDN edge ~ purge
ISOLATION / RESOURCES containers-cgroups-namespaces namespaces ~ cgroups ~ overlayfs layers ~ OCI runtime
IDENTITY / STATE auth-identity-session ........ OAuth2 ~ JWT ~ sessions ~ cookies ~ revocation ~ SSO
PLACEMENT load-balancing-partitioning ... L4/L7 ~ affinity ~ consistent hashing ~ discovery
EXECUTION / SILICON jit-interpretation-hardware .. interpreter ~ tiered JIT ~ inline caches ~ deopt
RETRIEVAL search-inverted-index ........ analyzer ~ postings ~ BM25 ~ segments ~ NRT refresh
TELEMETRY observability-pipeline ....... metrics/logs/traces ~ agents ~ sampling ~ cardinality
RELEASE ENGINEERING feature-flags-deploy-coupling flags ~ deploy ~ rollout ~ kill switches ~ cleanup debt
SHIPPING / SCHEMA migrations-deploy-coupling ... expand-contract ~ dual-write ~ backfill ~ lock budgets
ML SERVING ml-inference-pipeline ........ artifacts ~ feature stores ~ batching ~ drift
CONFIG DISTRIBUTION config-management-pipeline ... layering ~ hot reload ~ secrets ~ blast radius
MONEY AS A LOG payments-ledger-double-entry . double-entry ~ idempotency ~ reconciliation ~ sagas
BUILD HONESTY build-caches-reproducibility . lockfiles ~ content-addressed caches ~ hermetic builds
CALLBACK DELIVERY webhook-delivery ............. retries ~ signing ~ dedup ~ DLQ ~ pull fallback
FEEDBACK ADMISSION email-delivery-pipeline ...... SPF/DKIM/DMARC ~ reputation ~ warm-up ~ stream isolation
RECOVERY LOOPS queue-dead-letter-replay ..... DLQ ~ replay ~ idempotency keys ~ poison quarantine
ADMISSION STATE rate-limiting-distributed .... per-instance ~ Redis/Lua ~ edge buckets ~ sync lag
SEMANTIC RETRIEVAL search-vector-embedding ...... chunking ~ embeddings ~ ANN ~ reranker ~ eval loop
CUSTODY CHAINS deployment-artifact-promotion digests ~ registries ~ gates ~ provenance ~ rollback
WIRE CONTRACTS serialization-schema-evolution writer/reader schemas ~ registry compat gate ~ CI canary
WRITE-TIME MEDIA media-optimization-delivery ... master ~ transcode ladder ~ segments ~ ABR client
TIME DISTRIBUTION time-synchronization-infrastructure strata ~ ppm drift ~ bounded uncertainty
SECRET CUSTODY secrets-management-pipeline .... generate ~ vault ~ inject ~ rotate ~ audit
DATA DAGS batch-orchestration-lineage .... scheduler ~ partitions ~ backfill ~ lineage
QUERY FEDERATION graphql-federation ............. subgraphs ~ supergraph ~ entity joins ~ plans
ORIGIN ISOLATION browser-security-model ........ SOP ~ CORS gates ~ cookie scope ~ CSP ~ metadata
Reading order is flexible; the two most load-bearing pages are virtual-memory-caching.md (the caching lens appears in half the other pages) and scheduling-queueing.md (Little’s Law is the quantitative glue reused in backpressure.md).
File Inventory
| File | Domains bridged | Core named principle |
|---|---|---|
| dependency-resolution.md | Graph algorithms, build systems, package managers, schedulers | A build is a linear extension of a partial order; invalidation propagates on the reversed DAG |
| virtual-memory-caching.md | OS virtual memory, CPU caches, DB buffer pools, CDNs | One demand-filled hierarchy; eviction theory is layer-independent, cost gradients are not |
| db-indexes-data-structures.md | DBMS internals, DSA, Redis | Structures are shaped by the physics of the storage medium; amplification is the exchange rate |
| scheduling-queueing.md | OS scheduling, queueing theory, AQM | A scheduler is a queue discipline; Little’s Law connects staffing, load, and delay |
| tcp-distributed-failure.md | TCP/IP, distributed systems | Timeouts are statistical failure detectors; retries are only safe with deduplication |
| git-cas.md | Git, Nix, Docker, IPFS, backups, CDNs | Hash the content, not the location; a Merkle DAG authenticates its whole graph |
| transactions-concurrency-control.md | DB transactions, threading, memory models | Concurrency control is a chosen ordering contract plus the mechanism that enforces it |
| gc-memory-management.md | GC, memory allocators, distributed leases | Reclamation needs a definition of “dead”; every definition approximates from incomplete information |
| backpressure.md | OS queues, TCP, Kafka, Reactive Streams, load management | Demand must propagate upstream as fast as work flows downstream; Little’s Law caps throughput |
| event-sourcing-wal.md | Git history, database WAL, event sourcing, CDC, audit logs | State is a fold over an immutable, ordered event log; present state is a cache of that fold |
| cache-coherence-consistency.md | CPU caches (MESI), distributed cache invalidation, CDN purge, replication | Replicas of one truth + a write-propagation protocol; invalidation traffic scales with reader fan-out |
| query-planner-dataflow.md | Compilers, SQL planners, stream DAGs (Flink/Beam), build schedulers | Declarative intent → optimizer picks an execution DAG under a cost model; filter-early is one algebraic move everywhere |
| checksums-erasure-coding.md | TCP checksums, RAID parity, Reed-Solomon, Git hashes, ECC RAM | Redundancy converts detection into recovery; overhead vs repair cost vs failure independence is the whole trade |
| consensus-leases.md | Paxos/Raft, distributed locks, leases, fencing tokens | Linearizable registry + time-bounded grant + monotonic check at the resource; exclusion happens at the data |
| interrupts-async.md | Hardware IRQs, signals, epoll/kqueue, event loops, futures | Push beats poll: register interest, yield, be resumed; handler cost is paid by everyone sharing the dispatcher |
| incremental-computation.md | Build systems, spreadsheets, incremental compilers, matviews, React | Recompute only what a change invalidates: dependency graph + dirty propagation + memoized results |
| dns-cdn-routing.md | DNS, BGP/anycast, GeoDNS, CDNs | Every addressing layer is a cached copy of truth with a bounded staleness budget: TTL lease, BGP convergence, purge propagation |
| containers-cgroups-namespaces.md | Linux namespaces, cgroups, union filesystems, OCI, Kubernetes | Isolation is two orthogonal axes (view and resources); every container property is a composition decision about which to share |
| auth-identity-session.md | OAuth2, JWT, sessions, cookies, SSO | Auth mechanisms are leases on identity truth; revocation is shortening a lease after the fact, always by re-adding state, keys, or clocks |
| load-balancing-partitioning.md | L4/L7 balancing, hashing, data partitioning, discovery | Two placements per request (server and data owner) share one slider: spread vs locality vs stability in a changing pool |
| jit-interpretation-hardware.md | Interpreters, tiered JITs, CPU front ends | Inline caches, tiering, and branch predictors are one mechanism: frequency-trained prediction with recovery cost, at three scales |
| search-inverted-index.md | Text analysis, inverted indexes, BM25, segment stores | A B+tree idea transposed from values to terms; the contract diverges where relevance replaces exact, transactional truth |
| observability-pipeline.md | Metrics/logs/traces, agents, TSDBs, alerting | A fan-in flow that sheds evidence instead of blocking producers; fidelity knobs couple layers invisibly until incident time |
| feature-flags-deploy-coupling.md | Flag stores, deployment pipelines, experiment rollouts, config stores | A flag is a runtime branch point over cached, replicated rules; percentage rollout is deterministic, monotone bucketing; defaults fail toward the old world |
| migrations-deploy-coupling.md | Schema migrations, deploy ordering, online DDL tooling | Expand-contract is two-phase commit without an abort branch; the invariant is that every intermediate state serves every live process version |
| ml-inference-pipeline.md | ML serving, feature stores, GPU queueing, drift monitoring | A deployed model is a demand-filled, versioned pipeline; feature skew is the consistency failure of a two-level store whose layers must agree semantically |
| config-management-pipeline.md | Config stores, env layering, secrets, hot reload | Config is a replicated, layered cache of intent; atomic snapshot swap and per-request capture are the transactional boundaries; secrets are leases |
| payments-ledger-double-entry.md | Payments, ledgers, retries, sagas, reconciliation | Money state is a fold over an immutable, sum-zero log; idempotency keys tame at-least-once delivery; reconciliation is the cross-system checksum |
| build-caches-reproducibility.md | Build systems, package managers, CI, artifact pipelines | A build is a memoized function over an explicit input graph; reproducibility (the pure-function property) is what makes the memo table safely shareable |
| webhook-delivery.md | Webhooks, queues, retries, consumer processing | At-least-once over HTTP: the producer’s retry queue is a retransmission buffer; consumer idempotency keyed by event ID is the entry fee |
| email-delivery-pipeline.md | Email (MSA/MTA), DNS auth (SPF/DKIM/DMARC), mailbox filtering, feedback loops | Deliverability is feedback-driven admission control; reputation is a shared, slowly-decaying cache that every stage reads and writes |
| queue-dead-letter-replay.md | Queues, DLQs, replay tooling, idempotency registries | The DLQ is the failure working set and replay is resuming a fold under new code; safe only with immutable payloads, stable idempotency keys, and rate-capped re-injection |
| rate-limiting-distributed.md | Per-instance limiters, Redis/Lua counters, edge buckets, client headers | A caching hierarchy for admission state; sync lag makes over-admission a computable quantity to price, not a bug to eliminate |
| search-vector-embedding.md | Chunking, embedding models, ANN indexes, rerankers, eval loops | Write-time amortization with a versioned representation contract; the dominant failures are silent and only the eval loop can see them |
| deployment-artifact-promotion.md | Builds, registries, staging, promotion gates, provenance, rollback | An artifact is a content-addressed fact and promotion is a trust transition; custody claims (same bytes, signed, retained) are what rollback is made of |
| serialization-schema-evolution.md | Wire formats (JSON/Protobuf/Avro), schema registries, CI gates, rolling deploys, log retention | Compatibility is a property of the writer-reader pair; the registry gate turns the promise into a mechanical check, and old data is an asynchronous consumer |
| media-optimization-delivery.md | Master assets, transcoding, variant ladders, packaging, origin/edge caches, ABR clients | Write-time amortization over pure-function derivatives; segments immutable and manifests mutable, with cache keys as correctness surfaces |
| time-synchronization-infrastructure.md | Oscillators, NTP/PTP, cloud time services, monotonic vs wall clocks, leases, commit-wait | A clock reading is a cached copy of truth with a drift-driven staleness bound; correct consumers treat timestamps as ranges, not points |
| secrets-management-pipeline.md | CSPRNGs, vaults/KMS, injection mechanisms, rotation windows, audit logs | Custody of bytes, not access control: minimize plaintext copies, compute overlap windows from consumer pickup, and treat read logs as the leak sensor |
| batch-orchestration-lineage.md | Schedulers, executors, partitions, backfills, lineage graphs, quality gates | Dependency resolution at operational scale: partitions are the unit of idempotency, and lineage is the recorded execution of the task graph |
| graphql-federation.md | Subgraphs, supergraph composition, gateways, entity joins, client caches | A federated query planner whose join keys are declared in the schema; composition is the compatibility gate and partial failure is the contract |
| browser-security-model.md | Origins, SOP, CORS, cookies, CSP, Fetch Metadata | The browser enforces defaults while the server expresses policy; three threat classes (reads, ambient writes, same-origin code) get three non-interchangeable defenses |
Coverage Ledger
Status as of tasks 3-c (Round 15), 3-c2 (Round 16), r17-c2 (Round 17), r18-c (Round 18), r19-c (Round 19), and r20-c (Round 20); sibling research-projects/ directories are owned by parallel tasks per the coordinator’s plan — links to them resolve once those tasks land.
| Page | Domains covered | Status | Notes / gaps |
|---|---|---|---|
| index.md | — | Complete | This page |
| dependency-resolution.md | topo sort, make, npm/pip, Airflow, K8s init containers | Complete | SAT-based resolution only sketched; content-addressed rebuilds (Bazel/Nix) deferred to git-cas.md |
| virtual-memory-caching.md | demand paging, page cache, TLB, L1/L2, buffer pool, CDN | Complete | NUMA and huge pages left to ../../os/memory/numa.md and ../../os/memory/huge-pages.md |
| db-indexes-data-structures.md | B+tree, LSM, hash index, skiplist, columnar | Complete | Deep LSM compaction math left to ../../dbms/internals/lsm-trees.md |
| scheduling-queueing.md | CFS/MLFQ, M/M/1, Little’s Law, HOL, CoDel | Complete | M/M/c and Erlang models left to ../../queueing-theory/applied-systems.md |
| tcp-distributed-failure.md | RTO, retransmission, backoff, idempotency, failure detectors | Complete | Byzantine fault tolerance out of scope (../../distributed/fundamentals/byzantine-faults.md) |
| git-cas.md | Git objects, Merkle DAGs, Nix, Docker, IPFS, restic/borg, CDN assets | Complete | Packfile delta heuristics treated qualitatively |
| transactions-concurrency-control.md | 2PL, RW locks, monitors, MVCC, serializability, memory models | Complete | Distributed commit deep-dive stays in ../../dbms/transactions/two-phase-commit.md |
| gc-memory-management.md | tracing, refcounting, generational, STW/SLO, leases | Complete | JVM collector comparison left to ../../compilers/advanced/g1gc.md and neighbors |
| backpressure.md | bounded queues, TCP windows, Kafka pull, Reactive Streams, shedding | Complete | Rate-limit algorithms detailed in ../followup-tree/rate-limiter-design.md |
| event-sourcing-wal.md | git history, WAL/ARIES, event sourcing + CQRS, Debezium CDC, audit logs | Complete | Stream-windowing semantics out of scope; log-compaction mechanics deferred to ../../distributed/messaging-internals/kafka-log-internals.md |
| cache-coherence-consistency.md | MESI/MOESI, snooping vs directories, pub/sub invalidation, CDN purge, replicated consistency | Complete | Memory consistency models (TSO, relaxed) deferred to ../../arch/memory-hierarchy/coherence.md |
| query-planner-dataflow.md | compiler passes, cost-based planning, cardinality misestimates, Flink/Beam DAGs, build scheduling | Complete | Cascades memo internals sketched; details left to ../../dbms/advanced/cascades-optimizer.md |
| checksums-erasure-coding.md | Internet checksum, CRC, RAID parity, RS(k,m) vs replication, SECDED ECC, end-to-end argument | Complete | Regenerating codes (LRC, repair amplification below k) not covered |
| consensus-leases.md | Raft/Paxos, lock services, lease timing, fencing tokens, frozen-client case | Complete | Byzantine agreement out of scope (../../distributed/fundamentals/byzantine-faults.md) |
| interrupts-async.md | IRQs/top-bottom halves, signals, epoll/kqueue, io_uring, event loops, futures | Complete | Per-language runtime internals deferred to ../../languages/rust/async-runtimes.md and siblings |
| incremental-computation.md | make/Bazel keys, spreadsheet recalc, rustc queries, IVM, React memoization | Complete | Demand-driven frameworks (Adapton/Salsa) treated qualitatively |
| dns-cdn-routing.md | DNS hierarchy/resolution, TTL leases, anycast, GeoDNS, CDN edge/shield/purge, failover budgets | Complete | DNSSEC and DoH left to ../../networks/dns/dnssec.md and ../../networks/dns/doh.md |
| containers-cgroups-namespaces.md | namespaces, cgroup v2 controllers, overlayfs layers, OCI/runc, Pod composition, OOM vs throttling | Complete | Sandbox hardening (seccomp/Landlock) left to ../../os/security-internals/seccomp.md |
| auth-identity-session.md | OAuth2 grants, JWT claims/keys, sessions/cookies, refresh/revocation, SAML/OIDC/Kerberos, clock skew | Complete | WebAuthn/FIDO2 left to ../../security/advanced/fido2-webauthn.md |
| load-balancing-partitioning.md | L4/L7 policies, affinity, consistent/rendezvous hashing, range/hash partitioning, discovery, health checks | Complete | Live resharding protocols left to ../../dbms/advanced/online-resharding.md |
| jit-interpretation-hardware.md | interpreters, tiered JIT, ICs/hidden classes, deopt/OSR, branch prediction, uop cache, warmup | Complete | Register allocation left to ../../compilers/advanced/register-allocation.md; GC coupling to ./gc-memory-management.md |
| search-inverted-index.md | analyzers, FST term dictionary, postings, BM25, segments/NRT, filter cache, GIN vs external engines | Complete | Vector/similarity search out of scope (../../dbms/internals/vector-indexes-deep.md) |
| observability-pipeline.md | metrics/logs/traces, agents/buffers, head/tail sampling, cardinality, TSDB storage, burn-rate alerts | Complete | OpenTelemetry SDK internals treated qualitatively |
| feature-flags-deploy-coupling.md | flag species/lifecycles, SDK caching and defaults, deterministic rollout bucketing, targeting rules, kill switches, cleanup debt, flag interactions | Complete | Experiment statistics (CUPED, sequential testing) out of scope; rollout telemetry joins treated qualitatively |
| migrations-deploy-coupling.md | expand-contract, dual-write, backfill batching arithmetic, online DDL tools, lock budgets, deploy/migration serialization | Complete | Engine-specific DDL mechanics deferred to ../followup-tree/zero-downtime-migrations.md |
| ml-inference-pipeline.md | artifacts/registries, online/offline feature stores, prediction caches, quantization, dynamic batching math, drift layers, shadow/canary | Complete | Distributed training infrastructure out of scope; feature-store product internals treated qualitatively |
| config-management-pipeline.md | five config stores and their propagation clocks, layering/shadowing, hot reload, atomic swap, secret rotation with overlap, blast radius | Complete | Consensus internals of config stores deferred to ./consensus-leases.md |
| payments-ledger-double-entry.md | double-entry legs and sum-zero, chart of accounts, idempotency registries, reconciliation SLOs, compensation/sagas, books-close policy | Complete | Card-network auth/capture mechanics and regulatory specifics treated generically |
| build-caches-reproducibility.md | lockfiles plus integrity hashes, cache key completeness, hermetic toolchains, artifact promotion/attestation, shard stampedes, cache GC, poisoning | Complete | Bit-for-bit reproducibility tooling (diffoscope-class rebuild diffs) not covered |
| webhook-delivery.md | retry/backoff clocks, fast-ack pipelines, HMAC plus timestamp verification, dedup stores, DLQ/replay, pull fallback, storm arithmetic | Complete | Provider-specific retry policies (Stripe/GitHub-class) described generically, no URLs cited |
| email-delivery-pipeline.md | MSA/MTA relay, SPF/DKIM/DMARC, greylisting, placement/reputation, warm-up, stream separation, blocklists/backscatter, FBL/DMARC reports | Complete | ESP vendor internals and SMTP extension details treated generically; RFCs 7208/6376/7489 cited and curl-verified |
| queue-dead-letter-replay.md | retry loops, max-delivery parking, DLQ metadata, replay caps/canary, poison quarantine, idempotency registries, broker-by-broker DLQ mapping, replay-vs-backlog sequencing | Complete | Exactly-once transport internals deferred to ../../distributed/messaging-internals/exactly-once-semantics.md |
| rate-limiting-distributed.md | per-instance limiters, Redis+Lua counters, edge token buckets, client headers, sync-lag over-admission arithmetic, leased quota chunks, cost-based limits, noisy neighbors | Complete | Commercial API-tier billing models out of scope; GCRA math sketched in ../followup-tree/rate-limiter-design.md |
| search-vector-embedding.md | chunking, embedding models, HNSW/IVF recall-latency-memory, rerankers, caches, eval loop, model drift, stale embeddings, hybrid retrieval, quantization | Complete | Training-side concerns and model internals out of scope (../../dbms/internals/vector-indexes-deep.md owns index mechanics) |
| deployment-artifact-promotion.md | builds/digests, registry retention/GC, staging parity, promotion gates, SLSA provenance/SBOM/signing, admission verification, rollback inventory, release trains/rings | Complete | Registry product internals (Harbor/Artifactory specifics) treated generically; slsa.dev cited and curl-verified |
| serialization-schema-evolution.md | wire formats, writer/reader resolution, registry modes (BACKWARD/FORWARD/FULL, transitive), deploy sequencing, CI canary gate, log-retention arithmetic | Complete | Encoding internals (varints, zigzag) deferred to ../../backend/serialization/protobuf-encoding.md; protobuf.dev and avro.apache.org cited and curl-verified |
| media-optimization-delivery.md | masters/mezzanines, transcode farms, per-title ladders, packaging/segments/manifests, origin shields, ABR control loop, live-vs-VOD inversion | Complete | Perceptual quality metrics (VMAF-class) treated qualitatively; edge routing and purge left to ./dns-cdn-routing.md; developer.apple.com and MDN cited and curl-verified |
| time-synchronization-infrastructure.md | oscillator drift, NTP strata/offset estimation, PTP profiles, cloud bounded-uncertainty APIs, monotonic/wall discipline, leap-second smearing, amplification hardening | Complete | TrueTime internals described qualitatively from published material; logical-clock detail left to ../../distributed/advanced/hybrid-logical-clocks.md; RFCs 5905/8633 cited and curl-verified |
| secrets-management-pipeline.md | generation, vault/KMS storage, injection species, rotation overlap arithmetic, dynamic secrets, break-glass, audit-as-sensor, build-time leaks | Complete | Cryptographic primitive internals out of scope (../../security/cryptography.md); NIST SP 800-57 and Vault docs cited and curl-verified |
| batch-orchestration-lineage.md | triggers/sensors, executor pools, partition idempotency, backfill arithmetic, lineage events, quality gates, data contracts, DST schedules | Complete | Engine internals (Airflow scheduler internals) treated generically; airflow.apache.org and openlineage.io cited and curl-verified |
| graphql-federation.md | subgraph ownership, entity keys/representations, query planning, batching, complexity limits, composition CI, client normalized caches, error policies | Complete | Resolver-level implementation detail deferred to ../../backend/api/graphql-federation.md; spec.graphql.org and Apollo docs cited and curl-verified |
| browser-security-model.md | origins/SOP, CORS preflight/credentials, cookie scoping/prefixes, CSP nonces, Fetch Metadata, COOP/COEP, clickjacking, mixed content | Complete | TLS mechanics out of scope (../followup-tree/tls-handshake.md); auth flows deliberately left to ./auth-identity-session.md; fetch.spec.whatwg.org, MDN, and W3C CSP3 cited and curl-verified |
Deliberately out of scope for the atlas: generic pattern catalogs (owned by failure-modes/), mechanism-deep single-topic trade-offs (owned by the Why-Not Handbook), and incident timelines (owned by the Failure Casebook). Where those cover a topic, these pages link instead of duplicating.
Interview Questions
- A candidate explains that “a database buffer pool is basically a cache.” What follow-up questions would you ask to distinguish rote analogy from mechanism understanding, and what answers would satisfy you?
- Name two systems that share a partial-order dependency structure and one behavioral difference that emerges when a dependency graph contains a cycle.
- Why is “the disk is just slow RAM” a dangerous simplification when tuning a system that mmaps a large file? Give one workload where mmap loses to explicit
read()and say why in terms of fault cost. - Your p99 latency doubles as CPU utilization crosses 70%, though average latency barely moves. Construct an explanation using queueing theory alone, naming the law and the variance term.
- Design-interview framing: “Build me a container registry.” Which named principle from this atlas would structure your answer, and what are the two costs of that principle you would volunteer?
Key Takeaways
- A connection is only worth writing down if it names a precise shared mechanism and states exactly where the mapping fails.
- The same small set of principles — partial order, demand-filled caching, cost-of-the-medium, queue discipline as policy, statistical failure detection, content addressing, ordering contracts, liveness approximation, upstream demand propagation, state as a fold over an immutable log, write-propagation across replicas, cost-based plan selection over DAGs, redundancy converting detection into recovery, grant/lease/fencing stacks, push-based event dispatch, and invalidate-only-what-changed — explains a disproportionate fraction of systems behavior across OS, DBMS, networking, and distributed systems.
- Analogies transfer predictions, not constants: a cache miss at L1 costs ~1 ns, a page fault ~ms; the theory of eviction transfers, the numbers do not.
- Use the Coverage Ledger above to see what is covered, where depth was deliberately deferred to canonical pages, and which sibling research projects own the adjacent angles.
Cross-References
- ../../dsa/README.md — Data Structures and Algorithms Track — where the primitive structures (hash tables, trees, graphs) are taught before the atlas reinterprets them.
- ../../os/overview.md — Operating Systems Overview — canonical treatment of memory, scheduling, and paging that the atlas connects outward.
- ../../dbms/overview.md — Database Management Systems Overview — canonical indexing and transaction content.
- ../../networks/overview.md — Computer Networks — canonical TCP/IP content behind the failure-detection connections.
- ../../distributed/overview.md — Distributed Systems Overview — failure detectors, consistency models, and leases referenced across these pages.
- ../../queueing-theory/fundamentals.md — Queueing Theory Fundamentals — the formal backbone for the scheduling and backpressure pages.
- ../../git/internals.md — Git Internals — object model details behind the content-addressing connection.
- ../../compilers/README.md — Compilers Track — optimization passes and SSA, the compiler side of the planner connection.
- ../../data-engineering/README.md — Data Engineering — Flink/Beam/Debezium pages behind the event-log and dataflow connections.
- ../../arch/overview.md — Computer Architecture — cache hierarchy and memory-hierarchy numbers used throughout.
- ../followup-tree/rate-limiter-design.md — Rate Limiter Design — escalation chains for the rate-limiting half of the backpressure connection.
- ../why-not-handbook/caching-distributed.md — Caching vs Distributed Coordination — the decision-level companion to the caching analogy.
- ../failure-casebook/github-october-2018.md — GitHub October 2018 — the named incident illustrating retry-storm dynamics cited in two atlas pages.