Master

Shipping an app that is bounded

The end state is an app where every limit is written in one place and every claim has a run that produced it. The place and the runs are the whole claim of a release.

What you will see

One line with both numbers and a date. That line is the record of the decision.

About 1 min of reading

Try It

Write the limits and prove a refusal

1

Write the limits file

printf 'body_bytes 4096\nworkers 4\ndrain_ms 5000\ndebug off\n' > /tmp/lim.txt; wc -l < /tmp/lim.txt

Before you run it, say out loud what it will print. Then open the answer.

What it prints
4. Four lines is the whole contract of the app.
2

Attempt a run that breaches one

printf 'workers_wanted 12\n' | awk '{print ($2>4) ? "refuse" : "run"}'

Before you run it, say out loud what it will print. Then open the answer.

What it prints
refuse. The refusal came from the file, not from a person reading it.
3

Name the breached limit

printf 'refuse limit=workers used=12 max=4 date=2026-10-10\n' >> /tmp/stops.txt; tail -1 /tmp/stops.txt

Before you run it, say out loud what it will print. Then open the answer.

What it prints
One line with both numbers and a date. That line is the record of the decision.

Data Flow

An app to a shippable claim
1 The limits file is written
↓
2 The suite gates the deploy
↓
3 The load run stamps the ceiling
↓
4 A breach refuses and names the limit
Why this works
Why the limits live in the app

The app is the component that acts. A limit in a note is a limit that will be exceeded, and exceeded means unbounded.

The end state of this subject

An app that refuses with a number. That is the state where every claim is written, and written is the word that ends the subject.

Examples

The limits are one file

Body size, workers, timeouts, drain, and the debugger switch. One file, and the file is the contract of the app.

The artefacts are the same four

Input contract, suite, last scores, open cases. The shape of a shippable system does not change with the language.

The refusal is the record

A breach names the limit and the number. The name and the number are the record, and the record is the claim.

Words this lesson uses

Each one is defined here on this site. Open the entry for the full definition and the other words it points at.

← Deploying an app that must not break
Previous Lesson
Deploying an app that must not break