A terminal line of HTTP status and headers beside a dimmed status dashboard.

Readable evidence before dashboards

Prefer a verifiable sentence over a colored panel when the claim has to survive an audit.

August 18, 2026 · 3 min · XB Field Notes
Two clocks labelled freshness and validation with an ETag between them.

Cache validation is two clocks, not one freshness setting

A cache is only as coherent as the pair of conditions your headers make explicit.

August 14, 2026 · 4 min · XB Field Notes
A browser window with no script lane, CSP listing script-src 'none'.

The zero-JavaScript static site is a defensible choice

No script-src is not a gap — it is a boundary with a measurable contract.

August 13, 2026 · 3 min · XB Field Notes