# Dev Observatory > Engineering and AI news, practical system design, and technical guides for people who build software. Technical guides cover authentication, authorization, architecture, infrastructure, and software tradeoffs. News briefs link to original announcements. Markdown articles include the canonical webpage URL, publication and update dates, and source references. News event dates describe the announcement, separately from the publication date. ## Article collections - [Complete article index](https://www.devobs.io/llms-index.txt): All published guides and news, grouped by section and topic. - [Engineering guides](https://www.devobs.io/guides/): Browse longer technical articles. - [News archive](https://www.devobs.io/news/): Browse engineering and AI news. ## Selected guides - [Make loading, success, and failure states perceivable](https://www.devobs.io/articles/accessible-loading-and-error-states/index.md): Design async interface transitions with status messages, focus rules, stable controls, and restrained announcements for screen-reader users. - [Evolve an API Without Creating a Version Graveyard](https://www.devobs.io/articles/api-evolution-without-version-explosion/index.md): Classify API changes by client-visible impact, then use telemetry, migration windows, and contract tests before you create a new version. - [Approval gates for agent actions without approval fatigue](https://www.devobs.io/articles/approval-gates-for-agent-actions/index.md): A practical policy for deciding when an agent must pause, how approval receipts should be scoped, and when earlier consent no longer applies. - [Authorize Bulk APIs Without Leaks or Partial Corruption](https://www.devobs.io/articles/authorization-for-bulk-apis/index.md): Choose atomic, filtered, or per-item authorization semantics for bulk reads, writes, exports, and imports without weakening single-object access checks. - [Give an AI Agent a Smaller Access Contract Than Its Human Operator](https://www.devobs.io/articles/delegated-agent-access-contract/index.md): Do not hand an AI agent your user session. Exchange it for a smaller, task-specific grant bounded by resource, action, purpose, time, spend, and delegation. - [Give tenant admins control without platform privileges](https://www.devobs.io/articles/delegated-tenant-admin-boundaries/index.md): Design tenant admin roles that stay inside one tenant, limit delegation paths, and keep platform-level authority in a separate control plane. - [AD FS alternatives for an extranet becoming a commercial SaaS product](https://www.devobs.io/articles/adfs-extranet-login-alternatives/index.md): Should an externally used application remain attached to AD FS or establish a dedicated customer identity service? Compare retirement, continuity, and customer ownership. - [Alternatives to one login policy for every B2B customer](https://www.devobs.io/articles/all-customers-same-login-policy-alternatives/index.md): Choose an identity platform for mixed B2B access by deciding where customer policy lives, keeping policy states small, and testing cross-customer journeys. - [Authelia alternatives when a protected web app becomes a customer-facing product](https://www.devobs.io/articles/authelia-alternatives-customer-facing-application/index.md): Compare Authelia, authentik, and Ory Network when a proxy-protected app grows into a customer product with its own account lifecycle and multiple client paths. - [Prevent account takeover when users link another identity](https://www.devobs.io/articles/account-linking-takeover-prevention/index.md): Link identities safely by proving control of the signed-in account and the new login method, rather than treating a matching email address as ownership. - [Propagate Identity Changes Without Shadow Profile Sprawl](https://www.devobs.io/articles/identity-events-without-profile-sprawl/index.md): Send minimal identity events and read current details on demand so downstream services copy only fields they truly own. - [Stop machine accounts from becoming permanent orphaned access](https://www.devobs.io/articles/machine-account-ownership-and-offboarding/index.md): Give every automation identity an owner, tenant, purpose, credential lifecycle, review schedule, and retirement trigger before it becomes orphaned access. ## Recent publications - [Elastic 9.5 makes native Prometheus and PromQL support generally available](https://www.devobs.io/news/news-elastic-95-general-availability/index.md): Elastic 9.5 reaches GA with native Prometheus ingestion and PromQL support, alongside columnar storage and security-operations changes. - [Grafana Cloud Adaptive Profiles reaches general availability](https://www.devobs.io/news/news-grafana-adaptive-profiles-ga/index.md): Adaptive Profiles is now GA in Grafana Cloud, dynamically changing profiling detail and frequency and increasing resolution when anomalies or performance issues appear. - [OpenBao 2.6 adds namespace sealing and cross-plugin workflows](https://www.devobs.io/news/news-openbao-26-release/index.md): OpenBao 2.6 introduces per-namespace cryptographic sealing, external auto-unseal plugins, cross-plugin workflows, and distroless images. - [BOMHort joins the OpenSSF Sandbox](https://www.devobs.io/news/news-openssf-bomhort-sandbox/index.md): The Kubernetes-native BOMHort project joins OpenSSF, combining SBOM ingestion, OSV refreshes, VEX handling, license policy, and ClickHouse analytics. - [Prometheus 3.5.5 patches a dashboard sanitization flaw](https://www.devobs.io/news/news-prometheus-355-security-release/index.md): Prometheus 3.5.5 updates sanitize-html to address CVE-2026-53606, giving operators a focused security upgrade on the 3.5 LTS line. - [Sentry expands Logs with pinning, JSONL export, and large-query handling](https://www.devobs.io/news/news-sentry-logs-summer-2026-update/index.md): Sentry’s summer Logs update adds shareable pinned rows, aggregate-aware exports, JSONL, faster views, and continuation support for large searches. ## Optional - [Full article text](https://www.devobs.io/llms-full.txt): Large Markdown export of all published guides and news; use individual articles for focused reading. - [Editorial approach](https://www.devobs.io/about/): Coverage and source standards. - [RSS feed](https://www.devobs.io/rss.xml): Publication updates. - [XML sitemap](https://www.devobs.io/sitemap-index.xml): Canonical webpages for search engines.