SLStella Lininculpritai.hashnode.dev·May 9 · 14 min readTwo SQL primitives for when alert clustering gets it wrongOriginally published at theculprit.ai/blog/sql-primitives-for-incident-split-merge. Every alert-correlation system gets things wrong. The interesting question is what the on-call engineer can do about it at 2 a.m. The bad answer is: nothing. The sys...00
SLStella Lininculpritai.hashnode.dev·May 8 · 12 min readA HIPAA checklist for alert pipelines (8 controls)Originally published at theculprit.ai/blog/hipaa-checklist-for-alert-pipelines. The compliance review for a healthtech SaaS usually treats the alert pipeline as a footnote. The product is HIPAA-ready, the database is encrypted, the BAAs are signed, ...00
SLStella Lininculpritai.hashnode.dev·May 8 · 8 min readAnthropic prompt caching cut our RCA cost by 90%Originally published at theculprit.ai/blog/anthropic-prompt-caching-90-percent. LLM costs in production scale faster than the post-mortem of the demo bill suggests they will. The shape of the problem: you ship a feature that calls Claude on every me...00
SLStella Lininculpritai.hashnode.dev·May 8 · 9 min read6 regexes for detecting PII in event payloadsOriginally published at theculprit.ai/blog/detecting-pii-in-event-payloads. This is a working document, not a survey. The patterns below are the ones we actually run against inbound alert payloads in00
SLStella Lininculpritai.hashnode.dev·May 8 · 17 min readHow to keep PII out of your alert pipelineOriginally published at theculprit.ai/blog/keep-pii-out-of-alert-pipeline. Every alert that crosses your wire has a PII problem you have not yet acknowledged. This is not a sermon. It is a thing you 00
