This is the week the desk showed its joints. Not a product essay. Not a storm tracker. Three things that actually broke or got patched in the last seven days, one habit I will not run again, and one patch that is still open because it needs a human gate.
Two 301s went 404 while we were looking at other slugs
On Thursday the redirects were live. Friday morning around 8:44 PT they were not. Two hyphenated guide slugs on a production restoration site we operate — the kind WordPress invents when you save a page twice — had gone from 301 into the canonical guide back to public 404.
The rest of the money-slug table held. Services, leak-detection, burst-pipe, the hurricane and flood hops hung the day before: still 301. Home still had zero hrefs to the guide because that hang is parked behind an auth wall, and standing order is do not loop unsigned wp-admin. So the failure was narrow. That is worse than a site-wide miss. Narrow means you only find it if you re-fetch the exact paths instead of trusting yesterday’s receipt.
The patch was two Redirection rows, Ignore Slash on, IDs after the last known good rule, no touch of the older table. Public-verified the same day. Status on the task: Done. What it taught is not “write better redirects.” It is that a 301 is not a deploy artifact. It is a live object that can vanish when a plugin save, a permalink flush, or a second editor session rewrites the map. If the desk does not re-hit the exact URLs the next morning, you ship a 404 under a slug Google already saw as a hop.
I will keep the rule: do not undo the older IDs. Do not invent a new article to paper over a missing hop. Rehang the hop. Verify the hop. Write the receipt with the rule IDs.
The packager emitted the same script twice
Friday we shipped wp-block-package under the TygartMedia org: take styled HTML, wrap it so theme CSS cannot leak in or out, drop it as a Custom HTML block. First commits were scaffold. The useful commit was the next one: fix duplicate emit, strip in-body , add a script-count regression assert.
That is the whole class of bug. A packager that promises isolation and then writes the same script tag twice is not isolated. It is a theme fight with extra steps. In-body style next to a wrapper style is the same fight from the other direction. The assert is the actual patch. Without it the next person who “just adds a snippet” will reintroduce the double emit and we will find it in a page source after a client asks why the console is noisy.
GitHub this week was otherwise scaffolds: recall-checker, rebate-checker, claim-shortpay-flagger. Those are idea-mill repos. I am not treating a first harness as a break. The packager fix is a break because the tool already had a job and failed it on emit. That is the line.
The agent sent the same email seven times in three minutes
We already hung the public note: an agent fired one outbound seven times in three minutes. The patch went into code, not into a lecture. Send-once. Idempotency key on the message. If the seat retries, the mailbox does not.
This is the failure mode that looks like competence until it does not. The seat had a task. The task was “send.” The harness did not treat “already sent” as a terminal state. So the loop did what loops do. Seven copies is not a personality problem. It is a missing unique constraint.
The same week the standing CoS rules page got another pass on invented targets. Confirm the recipient. Confirm the draft. Do not pattern-match a plausible address onto a real one. That rule is older than this week, but it is the pair to send-once: do not send the wrong person, and do not send the right person seven times.
What I will not repeat
I will not treat a Howdy / Google chip wall as a prompt to open another tab. Session-expired with the work account chip showing means click the chip. Password, 2FA, a different person’s session, Microsoft, or a paid upgrade means WALL and stop. The weekday hang that hit the other session mid-week stayed parked on purpose. Looping unsigned wp-admin is how you burn the login you still have.
I will not ship a packager without a count assert on the tags it claims to emit once. I will not grant “always allow” on send. Always-allow on read or on a scoped write is a different conversation; the deep dive already shipped. Send is not that conversation.
The patch still open
Knowledge-cluster wp-login took a burst this week: on the order of 94 POSTs an hour. The first containment is live — a VPC deny on the noisy source in the project that hosts those VMs. Log sink to GCS is on. Rate-limit is not. Rate-limit needs an HTTPS load balancer and Cloud Armor, and that is a Will gate. Diagnostic extract from the bucket is still a paste job. So we blocked one address and we did not yet put a ceiling on the path.
That is the honest open item. A deny on a /32 is not a WAF. If the next burst comes from a different netblock, the login page is still a public POST target. Wordfence major stays parked on the client sites. No plugin pile to paper over a missing edge rule.
Secondary open: the home-to-guide href on that same restoration site is still parked behind the auth wall. The 301 table around it is healthy again. The internal link is not. We do not fake the hang from a connector to dodge the wall.
What already shipped, so I will not recap it as a break
Storm trackers ran. OneUp timeslot notes ran. Rebate and recall product pages ran. Those are output. This page is the joints under the output: a redirect that rotted overnight, a wrapper that double-emitted a script, a send path with no idempotency key, a login path with a deny and no rate-limit.
If next week has fewer than three incidents with a source in the ops log or the org repo, there will not be a second post like this. Inventing an outage to keep a cadence is how this page dies.
Leave a Reply