Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Concept Connection Atlas

Overview

Most technical curricula teach systems as silos: one chapter for virtual memory, one for database indexes, one for TCP. The exam then asks about each in isolation. Production systems and senior interviews do neither — they ask what a page cache, a DB buffer pool, and a CDN edge have in mechanism in common, and where that commonality stops. This atlas exists to answer that kind of question.

The unit of analysis here is the cross-domain connection, and every connection is held to the same five-part standard:

  1. Concepts stated independently. Each side of the connection is explained on its own, with just enough mechanism for the link to make sense. If you cannot state both concepts crisply, the connection is decoration, not understanding.
  2. The shared principle, named precisely. Not “these are similar” but something testable, e.g., “both are demand-filled caches with locality-driven eviction over a cost gradient” or “both compute a linear extension of a partial order induced by dependencies.” A well-named principle is a transferable tool: next time you meet an unfamiliar system, you can ask “which known principle does this instantiate?”
  3. Where the analogy HOLDS and where it BREAKS. Specific and technically honest. An analogy that never breaks is a definition, not an analogy. The breaking points are usually where the interview follow-up question lives (“but what about fan-out?”), and where real design mistakes happen (applying the cache-miss mental model to a page fault that costs 10,000× more).
  4. A concrete worked example, with numbers where possible. Mechanisms earn belief through arithmetic: a B+tree that fits a billion keys in 3 levels, an M/M/1 queue whose latency doubles per 10% of utilization near saturation.
  5. When the connection is useful. Problem-solving heuristics, interview answers, and real engineering decisions it unlocks — plus the decision it should not be stretched to.

Why this matters for engineering judgment. Mechanism transfer is how senior engineers reason about systems they have never operated. If you know that Git, Nix, Docker layers, IPFS, and content-hashed CDN assets all instantiate “hash the content, not the location,” then a new system described as “content-addressed” immediately implies immutability, cheap integrity checks, dedup, and cache-friendliness — and its costs (GC of unreferenced data, no in-place mutation) are implied too. Without the abstraction, each system looks like isolated trivia.

Why this matters for interviews. Interviewers escalate along the axis of abstraction, not trivia: “What is a B+tree?” (junior) → “Why a B+tree and not a skip list on disk?” (mid) → “What property of the storage medium makes fan-out the dominant term?” (senior). The third question is answered by the principle this atlas names in db-indexes-data-structures.md: data structures are shaped by the physics of the storage medium. The atlas pages are written so each can supply the top of that escalation chain.

Map of the Atlas

Forty-two connection pages, grouped by the kind of shared principle rather than by textbook silo:

                         CONCEPT CONNECTION ATLAS
                         =======================
  ORDERING              dependency-resolution ........ topo sort ~ make ~ npm ~ schedulers
  HIERARCHY / CACHING   virtual-memory-caching ....... demand paging ~ page cache ~ buffer pool ~ CDN
  STORAGE PHYSICS       db-indexes-data-structures ... B+tree ~ LSM ~ skiplist ~ columnar
  QUEUES / DELAY        scheduling-queueing .......... CPU schedulers ~ Kendall notation ~ CoDel
                        backpressure ................. bounded queues ~ TCP windows ~ Kafka pull ~ load shedding
  FAILURE / PROTOCOL    tcp-distributed-failure ...... RTO ~ retries ~ idempotency ~ failure detectors
  CONTENT ADDRESSING    git-cas ...................... Git ~ Nix ~ Docker ~ IPFS ~ restic
  ORDERING CONTRACTS    transactions-concurrency ..... 2PL ~ RW locks ~ MVCC ~ isolation ~ memory models
  LIFETIMES             gc-memory-management ......... reachability ~ refcounts ~ generations ~ leases
  EVENT LOGS            event-sourcing-wal ........... git log ~ WAL ~ event sourcing ~ CDC ~ audit trails
  REPLICATED COPIES     cache-coherence-consistency .. MESI ~ invalidation ~ CDN purge ~ replicated consistency
  OPTIMIZER DAGS        query-planner-dataflow ....... compiler passes ~ query planner ~ Flink DAGs ~ build graphs
  REDUNDANCY            checksums-erasure-coding ..... checksums ~ RAID parity ~ Reed-Solomon ~ hashes ~ ECC
  COORDINATION          consensus-leases ............. Raft ~ distributed locks ~ leases ~ fencing tokens
  EVENT DISPATCH        interrupts-async ............. IRQs ~ signals ~ epoll ~ event loops ~ futures
  INVALIDATION          incremental-computation ...... make ~ spreadsheets ~ incr. compilers ~ matviews ~ React
  ADDRESSING / ROUTING  dns-cdn-routing .............. DNS hierarchy ~ anycast ~ GeoDNS ~ CDN edge ~ purge
  ISOLATION / RESOURCES containers-cgroups-namespaces   namespaces ~ cgroups ~ overlayfs layers ~ OCI runtime
  IDENTITY / STATE      auth-identity-session ........ OAuth2 ~ JWT ~ sessions ~ cookies ~ revocation ~ SSO
  PLACEMENT             load-balancing-partitioning ... L4/L7 ~ affinity ~ consistent hashing ~ discovery
  EXECUTION / SILICON   jit-interpretation-hardware .. interpreter ~ tiered JIT ~ inline caches ~ deopt
  RETRIEVAL             search-inverted-index ........ analyzer ~ postings ~ BM25 ~ segments ~ NRT refresh
  TELEMETRY             observability-pipeline ....... metrics/logs/traces ~ agents ~ sampling ~ cardinality
  RELEASE ENGINEERING   feature-flags-deploy-coupling  flags ~ deploy ~ rollout ~ kill switches ~ cleanup debt
  SHIPPING / SCHEMA     migrations-deploy-coupling ... expand-contract ~ dual-write ~ backfill ~ lock budgets
  ML SERVING            ml-inference-pipeline ........ artifacts ~ feature stores ~ batching ~ drift
  CONFIG DISTRIBUTION   config-management-pipeline ... layering ~ hot reload ~ secrets ~ blast radius
  MONEY AS A LOG        payments-ledger-double-entry . double-entry ~ idempotency ~ reconciliation ~ sagas
  BUILD HONESTY         build-caches-reproducibility . lockfiles ~ content-addressed caches ~ hermetic builds
  CALLBACK DELIVERY     webhook-delivery ............. retries ~ signing ~ dedup ~ DLQ ~ pull fallback
  FEEDBACK ADMISSION    email-delivery-pipeline ...... SPF/DKIM/DMARC ~ reputation ~ warm-up ~ stream isolation
  RECOVERY LOOPS        queue-dead-letter-replay ..... DLQ ~ replay ~ idempotency keys ~ poison quarantine
  ADMISSION STATE       rate-limiting-distributed .... per-instance ~ Redis/Lua ~ edge buckets ~ sync lag
  SEMANTIC RETRIEVAL    search-vector-embedding ...... chunking ~ embeddings ~ ANN ~ reranker ~ eval loop
  CUSTODY CHAINS        deployment-artifact-promotion  digests ~ registries ~ gates ~ provenance ~ rollback
  WIRE CONTRACTS        serialization-schema-evolution  writer/reader schemas ~ registry compat gate ~ CI canary
  WRITE-TIME MEDIA      media-optimization-delivery ... master ~ transcode ladder ~ segments ~ ABR client
  TIME DISTRIBUTION     time-synchronization-infrastructure  strata ~ ppm drift ~ bounded uncertainty
  SECRET CUSTODY        secrets-management-pipeline .... generate ~ vault ~ inject ~ rotate ~ audit
  DATA DAGS             batch-orchestration-lineage .... scheduler ~ partitions ~ backfill ~ lineage
  QUERY FEDERATION      graphql-federation ............. subgraphs ~ supergraph ~ entity joins ~ plans
  ORIGIN ISOLATION      browser-security-model ........ SOP ~ CORS gates ~ cookie scope ~ CSP ~ metadata

Reading order is flexible; the two most load-bearing pages are virtual-memory-caching.md (the caching lens appears in half the other pages) and scheduling-queueing.md (Little’s Law is the quantitative glue reused in backpressure.md).

File Inventory

FileDomains bridgedCore named principle
dependency-resolution.mdGraph algorithms, build systems, package managers, schedulersA build is a linear extension of a partial order; invalidation propagates on the reversed DAG
virtual-memory-caching.mdOS virtual memory, CPU caches, DB buffer pools, CDNsOne demand-filled hierarchy; eviction theory is layer-independent, cost gradients are not
db-indexes-data-structures.mdDBMS internals, DSA, RedisStructures are shaped by the physics of the storage medium; amplification is the exchange rate
scheduling-queueing.mdOS scheduling, queueing theory, AQMA scheduler is a queue discipline; Little’s Law connects staffing, load, and delay
tcp-distributed-failure.mdTCP/IP, distributed systemsTimeouts are statistical failure detectors; retries are only safe with deduplication
git-cas.mdGit, Nix, Docker, IPFS, backups, CDNsHash the content, not the location; a Merkle DAG authenticates its whole graph
transactions-concurrency-control.mdDB transactions, threading, memory modelsConcurrency control is a chosen ordering contract plus the mechanism that enforces it
gc-memory-management.mdGC, memory allocators, distributed leasesReclamation needs a definition of “dead”; every definition approximates from incomplete information
backpressure.mdOS queues, TCP, Kafka, Reactive Streams, load managementDemand must propagate upstream as fast as work flows downstream; Little’s Law caps throughput
event-sourcing-wal.mdGit history, database WAL, event sourcing, CDC, audit logsState is a fold over an immutable, ordered event log; present state is a cache of that fold
cache-coherence-consistency.mdCPU caches (MESI), distributed cache invalidation, CDN purge, replicationReplicas of one truth + a write-propagation protocol; invalidation traffic scales with reader fan-out
query-planner-dataflow.mdCompilers, SQL planners, stream DAGs (Flink/Beam), build schedulersDeclarative intent → optimizer picks an execution DAG under a cost model; filter-early is one algebraic move everywhere
checksums-erasure-coding.mdTCP checksums, RAID parity, Reed-Solomon, Git hashes, ECC RAMRedundancy converts detection into recovery; overhead vs repair cost vs failure independence is the whole trade
consensus-leases.mdPaxos/Raft, distributed locks, leases, fencing tokensLinearizable registry + time-bounded grant + monotonic check at the resource; exclusion happens at the data
interrupts-async.mdHardware IRQs, signals, epoll/kqueue, event loops, futuresPush beats poll: register interest, yield, be resumed; handler cost is paid by everyone sharing the dispatcher
incremental-computation.mdBuild systems, spreadsheets, incremental compilers, matviews, ReactRecompute only what a change invalidates: dependency graph + dirty propagation + memoized results
dns-cdn-routing.mdDNS, BGP/anycast, GeoDNS, CDNsEvery addressing layer is a cached copy of truth with a bounded staleness budget: TTL lease, BGP convergence, purge propagation
containers-cgroups-namespaces.mdLinux namespaces, cgroups, union filesystems, OCI, KubernetesIsolation is two orthogonal axes (view and resources); every container property is a composition decision about which to share
auth-identity-session.mdOAuth2, JWT, sessions, cookies, SSOAuth mechanisms are leases on identity truth; revocation is shortening a lease after the fact, always by re-adding state, keys, or clocks
load-balancing-partitioning.mdL4/L7 balancing, hashing, data partitioning, discoveryTwo placements per request (server and data owner) share one slider: spread vs locality vs stability in a changing pool
jit-interpretation-hardware.mdInterpreters, tiered JITs, CPU front endsInline caches, tiering, and branch predictors are one mechanism: frequency-trained prediction with recovery cost, at three scales
search-inverted-index.mdText analysis, inverted indexes, BM25, segment storesA B+tree idea transposed from values to terms; the contract diverges where relevance replaces exact, transactional truth
observability-pipeline.mdMetrics/logs/traces, agents, TSDBs, alertingA fan-in flow that sheds evidence instead of blocking producers; fidelity knobs couple layers invisibly until incident time
feature-flags-deploy-coupling.mdFlag stores, deployment pipelines, experiment rollouts, config storesA flag is a runtime branch point over cached, replicated rules; percentage rollout is deterministic, monotone bucketing; defaults fail toward the old world
migrations-deploy-coupling.mdSchema migrations, deploy ordering, online DDL toolingExpand-contract is two-phase commit without an abort branch; the invariant is that every intermediate state serves every live process version
ml-inference-pipeline.mdML serving, feature stores, GPU queueing, drift monitoringA deployed model is a demand-filled, versioned pipeline; feature skew is the consistency failure of a two-level store whose layers must agree semantically
config-management-pipeline.mdConfig stores, env layering, secrets, hot reloadConfig is a replicated, layered cache of intent; atomic snapshot swap and per-request capture are the transactional boundaries; secrets are leases
payments-ledger-double-entry.mdPayments, ledgers, retries, sagas, reconciliationMoney state is a fold over an immutable, sum-zero log; idempotency keys tame at-least-once delivery; reconciliation is the cross-system checksum
build-caches-reproducibility.mdBuild systems, package managers, CI, artifact pipelinesA build is a memoized function over an explicit input graph; reproducibility (the pure-function property) is what makes the memo table safely shareable
webhook-delivery.mdWebhooks, queues, retries, consumer processingAt-least-once over HTTP: the producer’s retry queue is a retransmission buffer; consumer idempotency keyed by event ID is the entry fee
email-delivery-pipeline.mdEmail (MSA/MTA), DNS auth (SPF/DKIM/DMARC), mailbox filtering, feedback loopsDeliverability is feedback-driven admission control; reputation is a shared, slowly-decaying cache that every stage reads and writes
queue-dead-letter-replay.mdQueues, DLQs, replay tooling, idempotency registriesThe DLQ is the failure working set and replay is resuming a fold under new code; safe only with immutable payloads, stable idempotency keys, and rate-capped re-injection
rate-limiting-distributed.mdPer-instance limiters, Redis/Lua counters, edge buckets, client headersA caching hierarchy for admission state; sync lag makes over-admission a computable quantity to price, not a bug to eliminate
search-vector-embedding.mdChunking, embedding models, ANN indexes, rerankers, eval loopsWrite-time amortization with a versioned representation contract; the dominant failures are silent and only the eval loop can see them
deployment-artifact-promotion.mdBuilds, registries, staging, promotion gates, provenance, rollbackAn artifact is a content-addressed fact and promotion is a trust transition; custody claims (same bytes, signed, retained) are what rollback is made of
serialization-schema-evolution.mdWire formats (JSON/Protobuf/Avro), schema registries, CI gates, rolling deploys, log retentionCompatibility is a property of the writer-reader pair; the registry gate turns the promise into a mechanical check, and old data is an asynchronous consumer
media-optimization-delivery.mdMaster assets, transcoding, variant ladders, packaging, origin/edge caches, ABR clientsWrite-time amortization over pure-function derivatives; segments immutable and manifests mutable, with cache keys as correctness surfaces
time-synchronization-infrastructure.mdOscillators, NTP/PTP, cloud time services, monotonic vs wall clocks, leases, commit-waitA clock reading is a cached copy of truth with a drift-driven staleness bound; correct consumers treat timestamps as ranges, not points
secrets-management-pipeline.mdCSPRNGs, vaults/KMS, injection mechanisms, rotation windows, audit logsCustody of bytes, not access control: minimize plaintext copies, compute overlap windows from consumer pickup, and treat read logs as the leak sensor
batch-orchestration-lineage.mdSchedulers, executors, partitions, backfills, lineage graphs, quality gatesDependency resolution at operational scale: partitions are the unit of idempotency, and lineage is the recorded execution of the task graph
graphql-federation.mdSubgraphs, supergraph composition, gateways, entity joins, client cachesA federated query planner whose join keys are declared in the schema; composition is the compatibility gate and partial failure is the contract
browser-security-model.mdOrigins, SOP, CORS, cookies, CSP, Fetch MetadataThe browser enforces defaults while the server expresses policy; three threat classes (reads, ambient writes, same-origin code) get three non-interchangeable defenses

Coverage Ledger

Status as of tasks 3-c (Round 15), 3-c2 (Round 16), r17-c2 (Round 17), r18-c (Round 18), r19-c (Round 19), and r20-c (Round 20); sibling research-projects/ directories are owned by parallel tasks per the coordinator’s plan — links to them resolve once those tasks land.

PageDomains coveredStatusNotes / gaps
index.md—CompleteThis page
dependency-resolution.mdtopo sort, make, npm/pip, Airflow, K8s init containersCompleteSAT-based resolution only sketched; content-addressed rebuilds (Bazel/Nix) deferred to git-cas.md
virtual-memory-caching.mddemand paging, page cache, TLB, L1/L2, buffer pool, CDNCompleteNUMA and huge pages left to ../../os/memory/numa.md and ../../os/memory/huge-pages.md
db-indexes-data-structures.mdB+tree, LSM, hash index, skiplist, columnarCompleteDeep LSM compaction math left to ../../dbms/internals/lsm-trees.md
scheduling-queueing.mdCFS/MLFQ, M/M/1, Little’s Law, HOL, CoDelCompleteM/M/c and Erlang models left to ../../queueing-theory/applied-systems.md
tcp-distributed-failure.mdRTO, retransmission, backoff, idempotency, failure detectorsCompleteByzantine fault tolerance out of scope (../../distributed/fundamentals/byzantine-faults.md)
git-cas.mdGit objects, Merkle DAGs, Nix, Docker, IPFS, restic/borg, CDN assetsCompletePackfile delta heuristics treated qualitatively
transactions-concurrency-control.md2PL, RW locks, monitors, MVCC, serializability, memory modelsCompleteDistributed commit deep-dive stays in ../../dbms/transactions/two-phase-commit.md
gc-memory-management.mdtracing, refcounting, generational, STW/SLO, leasesCompleteJVM collector comparison left to ../../compilers/advanced/g1gc.md and neighbors
backpressure.mdbounded queues, TCP windows, Kafka pull, Reactive Streams, sheddingCompleteRate-limit algorithms detailed in ../followup-tree/rate-limiter-design.md
event-sourcing-wal.mdgit history, WAL/ARIES, event sourcing + CQRS, Debezium CDC, audit logsCompleteStream-windowing semantics out of scope; log-compaction mechanics deferred to ../../distributed/messaging-internals/kafka-log-internals.md
cache-coherence-consistency.mdMESI/MOESI, snooping vs directories, pub/sub invalidation, CDN purge, replicated consistencyCompleteMemory consistency models (TSO, relaxed) deferred to ../../arch/memory-hierarchy/coherence.md
query-planner-dataflow.mdcompiler passes, cost-based planning, cardinality misestimates, Flink/Beam DAGs, build schedulingCompleteCascades memo internals sketched; details left to ../../dbms/advanced/cascades-optimizer.md
checksums-erasure-coding.mdInternet checksum, CRC, RAID parity, RS(k,m) vs replication, SECDED ECC, end-to-end argumentCompleteRegenerating codes (LRC, repair amplification below k) not covered
consensus-leases.mdRaft/Paxos, lock services, lease timing, fencing tokens, frozen-client caseCompleteByzantine agreement out of scope (../../distributed/fundamentals/byzantine-faults.md)
interrupts-async.mdIRQs/top-bottom halves, signals, epoll/kqueue, io_uring, event loops, futuresCompletePer-language runtime internals deferred to ../../languages/rust/async-runtimes.md and siblings
incremental-computation.mdmake/Bazel keys, spreadsheet recalc, rustc queries, IVM, React memoizationCompleteDemand-driven frameworks (Adapton/Salsa) treated qualitatively
dns-cdn-routing.mdDNS hierarchy/resolution, TTL leases, anycast, GeoDNS, CDN edge/shield/purge, failover budgetsCompleteDNSSEC and DoH left to ../../networks/dns/dnssec.md and ../../networks/dns/doh.md
containers-cgroups-namespaces.mdnamespaces, cgroup v2 controllers, overlayfs layers, OCI/runc, Pod composition, OOM vs throttlingCompleteSandbox hardening (seccomp/Landlock) left to ../../os/security-internals/seccomp.md
auth-identity-session.mdOAuth2 grants, JWT claims/keys, sessions/cookies, refresh/revocation, SAML/OIDC/Kerberos, clock skewCompleteWebAuthn/FIDO2 left to ../../security/advanced/fido2-webauthn.md
load-balancing-partitioning.mdL4/L7 policies, affinity, consistent/rendezvous hashing, range/hash partitioning, discovery, health checksCompleteLive resharding protocols left to ../../dbms/advanced/online-resharding.md
jit-interpretation-hardware.mdinterpreters, tiered JIT, ICs/hidden classes, deopt/OSR, branch prediction, uop cache, warmupCompleteRegister allocation left to ../../compilers/advanced/register-allocation.md; GC coupling to ./gc-memory-management.md
search-inverted-index.mdanalyzers, FST term dictionary, postings, BM25, segments/NRT, filter cache, GIN vs external enginesCompleteVector/similarity search out of scope (../../dbms/internals/vector-indexes-deep.md)
observability-pipeline.mdmetrics/logs/traces, agents/buffers, head/tail sampling, cardinality, TSDB storage, burn-rate alertsCompleteOpenTelemetry SDK internals treated qualitatively
feature-flags-deploy-coupling.mdflag species/lifecycles, SDK caching and defaults, deterministic rollout bucketing, targeting rules, kill switches, cleanup debt, flag interactionsCompleteExperiment statistics (CUPED, sequential testing) out of scope; rollout telemetry joins treated qualitatively
migrations-deploy-coupling.mdexpand-contract, dual-write, backfill batching arithmetic, online DDL tools, lock budgets, deploy/migration serializationCompleteEngine-specific DDL mechanics deferred to ../followup-tree/zero-downtime-migrations.md
ml-inference-pipeline.mdartifacts/registries, online/offline feature stores, prediction caches, quantization, dynamic batching math, drift layers, shadow/canaryCompleteDistributed training infrastructure out of scope; feature-store product internals treated qualitatively
config-management-pipeline.mdfive config stores and their propagation clocks, layering/shadowing, hot reload, atomic swap, secret rotation with overlap, blast radiusCompleteConsensus internals of config stores deferred to ./consensus-leases.md
payments-ledger-double-entry.mddouble-entry legs and sum-zero, chart of accounts, idempotency registries, reconciliation SLOs, compensation/sagas, books-close policyCompleteCard-network auth/capture mechanics and regulatory specifics treated generically
build-caches-reproducibility.mdlockfiles plus integrity hashes, cache key completeness, hermetic toolchains, artifact promotion/attestation, shard stampedes, cache GC, poisoningCompleteBit-for-bit reproducibility tooling (diffoscope-class rebuild diffs) not covered
webhook-delivery.mdretry/backoff clocks, fast-ack pipelines, HMAC plus timestamp verification, dedup stores, DLQ/replay, pull fallback, storm arithmeticCompleteProvider-specific retry policies (Stripe/GitHub-class) described generically, no URLs cited
email-delivery-pipeline.mdMSA/MTA relay, SPF/DKIM/DMARC, greylisting, placement/reputation, warm-up, stream separation, blocklists/backscatter, FBL/DMARC reportsCompleteESP vendor internals and SMTP extension details treated generically; RFCs 7208/6376/7489 cited and curl-verified
queue-dead-letter-replay.mdretry loops, max-delivery parking, DLQ metadata, replay caps/canary, poison quarantine, idempotency registries, broker-by-broker DLQ mapping, replay-vs-backlog sequencingCompleteExactly-once transport internals deferred to ../../distributed/messaging-internals/exactly-once-semantics.md
rate-limiting-distributed.mdper-instance limiters, Redis+Lua counters, edge token buckets, client headers, sync-lag over-admission arithmetic, leased quota chunks, cost-based limits, noisy neighborsCompleteCommercial API-tier billing models out of scope; GCRA math sketched in ../followup-tree/rate-limiter-design.md
search-vector-embedding.mdchunking, embedding models, HNSW/IVF recall-latency-memory, rerankers, caches, eval loop, model drift, stale embeddings, hybrid retrieval, quantizationCompleteTraining-side concerns and model internals out of scope (../../dbms/internals/vector-indexes-deep.md owns index mechanics)
deployment-artifact-promotion.mdbuilds/digests, registry retention/GC, staging parity, promotion gates, SLSA provenance/SBOM/signing, admission verification, rollback inventory, release trains/ringsCompleteRegistry product internals (Harbor/Artifactory specifics) treated generically; slsa.dev cited and curl-verified
serialization-schema-evolution.mdwire formats, writer/reader resolution, registry modes (BACKWARD/FORWARD/FULL, transitive), deploy sequencing, CI canary gate, log-retention arithmeticCompleteEncoding internals (varints, zigzag) deferred to ../../backend/serialization/protobuf-encoding.md; protobuf.dev and avro.apache.org cited and curl-verified
media-optimization-delivery.mdmasters/mezzanines, transcode farms, per-title ladders, packaging/segments/manifests, origin shields, ABR control loop, live-vs-VOD inversionCompletePerceptual quality metrics (VMAF-class) treated qualitatively; edge routing and purge left to ./dns-cdn-routing.md; developer.apple.com and MDN cited and curl-verified
time-synchronization-infrastructure.mdoscillator drift, NTP strata/offset estimation, PTP profiles, cloud bounded-uncertainty APIs, monotonic/wall discipline, leap-second smearing, amplification hardeningCompleteTrueTime internals described qualitatively from published material; logical-clock detail left to ../../distributed/advanced/hybrid-logical-clocks.md; RFCs 5905/8633 cited and curl-verified
secrets-management-pipeline.mdgeneration, vault/KMS storage, injection species, rotation overlap arithmetic, dynamic secrets, break-glass, audit-as-sensor, build-time leaksCompleteCryptographic primitive internals out of scope (../../security/cryptography.md); NIST SP 800-57 and Vault docs cited and curl-verified
batch-orchestration-lineage.mdtriggers/sensors, executor pools, partition idempotency, backfill arithmetic, lineage events, quality gates, data contracts, DST schedulesCompleteEngine internals (Airflow scheduler internals) treated generically; airflow.apache.org and openlineage.io cited and curl-verified
graphql-federation.mdsubgraph ownership, entity keys/representations, query planning, batching, complexity limits, composition CI, client normalized caches, error policiesCompleteResolver-level implementation detail deferred to ../../backend/api/graphql-federation.md; spec.graphql.org and Apollo docs cited and curl-verified
browser-security-model.mdorigins/SOP, CORS preflight/credentials, cookie scoping/prefixes, CSP nonces, Fetch Metadata, COOP/COEP, clickjacking, mixed contentCompleteTLS mechanics out of scope (../followup-tree/tls-handshake.md); auth flows deliberately left to ./auth-identity-session.md; fetch.spec.whatwg.org, MDN, and W3C CSP3 cited and curl-verified

Deliberately out of scope for the atlas: generic pattern catalogs (owned by failure-modes/), mechanism-deep single-topic trade-offs (owned by the Why-Not Handbook), and incident timelines (owned by the Failure Casebook). Where those cover a topic, these pages link instead of duplicating.

Interview Questions

  1. A candidate explains that “a database buffer pool is basically a cache.” What follow-up questions would you ask to distinguish rote analogy from mechanism understanding, and what answers would satisfy you?
  2. Name two systems that share a partial-order dependency structure and one behavioral difference that emerges when a dependency graph contains a cycle.
  3. Why is “the disk is just slow RAM” a dangerous simplification when tuning a system that mmaps a large file? Give one workload where mmap loses to explicit read() and say why in terms of fault cost.
  4. Your p99 latency doubles as CPU utilization crosses 70%, though average latency barely moves. Construct an explanation using queueing theory alone, naming the law and the variance term.
  5. Design-interview framing: “Build me a container registry.” Which named principle from this atlas would structure your answer, and what are the two costs of that principle you would volunteer?

Key Takeaways

  • A connection is only worth writing down if it names a precise shared mechanism and states exactly where the mapping fails.
  • The same small set of principles — partial order, demand-filled caching, cost-of-the-medium, queue discipline as policy, statistical failure detection, content addressing, ordering contracts, liveness approximation, upstream demand propagation, state as a fold over an immutable log, write-propagation across replicas, cost-based plan selection over DAGs, redundancy converting detection into recovery, grant/lease/fencing stacks, push-based event dispatch, and invalidate-only-what-changed — explains a disproportionate fraction of systems behavior across OS, DBMS, networking, and distributed systems.
  • Analogies transfer predictions, not constants: a cache miss at L1 costs ~1 ns, a page fault ~ms; the theory of eviction transfers, the numbers do not.
  • Use the Coverage Ledger above to see what is covered, where depth was deliberately deferred to canonical pages, and which sibling research projects own the adjacent angles.

Cross-References