Work
Work
Open tools, research and practical fixes. Choose something to use or inspect.
Use now
Subscribe, check a repository, price a pressure washing job or a house cleaning visit, order the Canada check or request the sample today.
-
Calendar · Subscribe free
Breakage Calendar: what breaks next, and how to check
Dated changes to infrastructure that will break running systems: who is affected, how to check, and a tested fix where we have one. Subscribe in your calendar app or feed reader; neither needs an account or email.
Open the calendar -
Check · Free, in your browser
Which Breakage Calendar dates hit your repository?
Choose a repository folder and see which Breakage Calendar dates its files touch. Each date’s own search runs in your browser; nothing is uploaded.
Covers the dates a file search can find. Dates that depend on servers, certificates, clocks or browsers are listed, not checked.
Check a repository -
Calculator · Free, in your browser
Pressure washing pricing calculator
Price a pressure washing or soft wash job from square feet, your production rate and bleach mix. The price is solved for your target margin after card fees, with your minimum charge and a deposit, and the formula is written out line by line.
Price a job -
Calculator · Free, in your browser
House cleaning pricing calculator
Price a house cleaning visit from square feet, bedrooms, bathrooms and your own timed minutes. The price is solved for your target margin after card fees, the regular price is set so a weekly or biweekly discount keeps that margin, and the formula is written out line by line.
Price a visit -
Check · US$99
Canada check: is your container image wrong for the 1 November time change?
Send us the name of a public Linux x86-64 container image. Within 24 hours of your email, we send the checks and their output, with a tested fix if one is needed, or tell you we could not complete the check.
US$99 per image, paid after you get the result. If we cannot complete the check or verify a needed fix, you pay nothing.
See what the check covers -
Dataset · Free on request
Dated-break coding tasks: 3-task sample
Three software-engineering tasks built around published environment changes. Each specifies a repository commit and a container base image by digest; the solver has to diagnose and repair the reproduced failure.
For teams that evaluate coding agents. Request access on Hugging Face; it is granted automatically.
Request the sample
Maintained tools
-
Kit
Failure Lab
Run a 25-minute group session in your browser. Make the call, then compare with the sourced record.
Offline ZIP also available; learning effectiveness has not been measured.
Try a group session -
Tool
Sync Witness
An Obsidian plugin that notices when a sync tool silently removes notes or rolls them back to an older version, alerts you once and restores the exact bytes.
Desktop only; tested on Obsidian 1.14.4 for Linux.
Install the plugin -
Tool
dst-check
Check a confirmed schedule expression, timezone and installed scheduler version around a clock change.
Requires confirmed runtime values.
Read and run the checker -
Kit
deno-kv-workers
Move a Deno KV app to Cloudflare Workers with its data, TTLs and atomic checks intact. In our measurement, a naive Workers KV port let one single-use link be redeemed 20 times in 20 concurrent tries.
Tested locally with wrangler dev, not on a deployed Cloudflare account.
Read and run the kit
Further reading
Guides and security notes. Each page states what it checked and when.
-
Guide · PDF accessibility
Acrobat Accessibility Checker "Failed" and "Needs manual check": what 7 items need, and how a pass can still fail a reader
What Acrobat Pro's Full Check means by "Tagged content - Failed", "Figures alternate text - Failed", "Title - Failed" and four more, the fix Adobe gives, and how an item can pass while the file still fails a screen-reader user.
Read the guide -
Guide · ADA Title II
"Accessible version on request" or an alternate copy: does it satisfy the Title II web rule for posted PDFs?
Mostly no. For a PDF the web rule covers, the Justice Department says neither a staffed phone line nor a statement telling people how to request an accessible copy meets the requirement.
Read the guide -
Guide · ADA Title II
Which posted PDFs do you have to fix for the ADA Title II web rule? Sort them before you ask for a quote
Some PDFs posted before your compliance date may qualify for an exception from the web rule's WCAG 2.1 AA requirements. This page walks through a way to sort your files, using the rule's own words.
Read the guide -
Guide · PDF accessibility
What PDF remediation costs per page in 2026, and what to put in the order
If you're budgeting to make posted PDFs accessible before your ADA Title II or Section 504 date, the most useful public price list is Washington State's cooperative contract for document remediation.
Read the guide -
Guide · Security
APT CVE-2026-109518: are the debian and ubuntu Docker images fixed yet?
The apt in each official debian and ubuntu image, the fixed versions, a one-line check, and a Dockerfile upgrade with retries off.
Read the guide -
Research note · Replication
Ten simulated readers or one plain question? Hacker News stories posted after a model's training cutoff
An easy story-versus-story contrast, not a headline A/B test: one model, one persona set, Hacker News only. Scores, prompts and scorer are public.
Read the note -
Guide · Security
Rails 8.1.4.1 and 8.0.5.2: is your self-hosted Rails app patched?
21 security fixes, one Critical, and no fix for Rails 7.2, 7.1 or 6.1: the version check, the ImageMagick conditions, workarounds.
Read the guide -
Guide · PDF accessibility
PAC 2026 "AI-assisted check" warnings on a PDF with no PDF/UA failures: fix or leave?
PAC 2026.1 shows AI-assisted check items as warnings, not failures, and leaves them out of its PDF report. How to decide which to fix, with what we found on three public reports.
Read the guide -
Guide · Pillow
Pillow GHSA-5x8w-8jj5-q52h / CVE-2026-112398: interim checks while stuck on 12.3.0
Pillow October 2026 advisories: interim checks on 12.3.0, packages still capping Pillow below 13, and tested scanner ignore forms.
Read the guide -
Guide · PHP
PHP 8.6.0, 8.5.13 and 8.4.28 on Docker Hub: which php tags are out
Track official php Docker Hub tags for PHP 8.6.0, 8.5.13 and 8.4.28, their publication status, and where php:latest and php:8 point. Checks planned for 19 and 20 November.
Read the guide -
Guide · Go
CVE-2026-111943 (Go): your scanner flags stdlib in a binary you didn't build
Reading a binary's toolchain, 15 checked binaries and their rebuild status, and tested ways to protect an unrebuilt one.
Read the guide -
Field report · Free tools
Free tools on real Prism, ChemDraw, Revu and QDA files
The calculation came through; captions, arrows, markups and vendor exports broke. Four tests, with kits.
Read the report -
Guide · SQLite
CVE-2026-119373 (SQLite < 3.54.0): no fixed package? Find the copy, see what fixes it
A tested check that lists every SQLite copy in an image with its release date, what fixes each copy, and what an attacker needs for each of the ten CVEs.
Read the guide -
Guide · Node.js
CVE-2026-111497 (Brotli): npm audit is clean, but the scanner still flags your image
A tested check that reads an image for Brotli copies and the fix's marker, what fixes each copy, and the routes for Node 20, which no release fixes.
Read the guide -
Guide · Node.js
zod GHSA-mrhx-c7xc-m3w5: the CVE was rejected, the alert is still open
What each zod version does with a million bad elements, what limits the work, and scanner exceptions that worked in our tests.
Read the guide -
Guide · Linux kernel
CVE-2026-98432: is it fixed on WSL, AKS, Bottlerocket, GKE, Talos or Flatcar?
Which versions have the kernel fix, row by row with sources: WSL, AKS, Bottlerocket, EKS AMIs, GKE and COS, Flatcar, Talos and TrueNAS.
Read the guide -
Accessibility note · Agenda packets
You tagged the attachment. Is it still tagged in the agenda packet?
Tagged attachments that came out of compiled agenda packets with no tags at all, two checks for your own packet, and the fix.
Read the note -
Guide · Browsers
"This site uses XSLT" on your sitemap: Chrome 158, SEO, and what each plugin is doing
The file search engines read is unchanged. Status for Yoast, Rank Math, All in One SEO, WordPress, Ghost and SEOmatic, and a one-line check.
Read the guide -
Guide · Node.js
minimatch GHSA-g3hv-75wg-m249: are you exposed, and what an override to 11 breaks
Which versions contain the code, the packages that failed with minimatch 11 in our tests, and scanner exceptions that work.
Read the guide -
Guide · pnpm
Dependabot alerts closed as "fixed" after a pnpm 12 upgrade
GitHub says it fixed this on 3 November, but a graph can list only pnpm until it is refreshed. The refresh step, a check script, and the tested cost of
Read the guidepmOnFail: ignore. -
Guide · Daylight saving
01:00 came twice: what broke when daylight saving ended on 1 November 2026
Two schedules went silent, a daily report was due twice and a time sync set the server clock back an hour: systemd, hermes-agent, OpenCVE and 1Panel in the repeated hour, reproduced, with what helps.
Read the guide -
Guide · Bitwarden
Bitwarden 2026.10.1 stopped loading on CPUs without SSE4.1 in our tests
"v128 not enabled" or an endless spinner. A CPU check, the Proxmox and libvirt CPU types we tested, and options for an old PC.
Read the guide -
Guide · AppImage
Why the continuous appimagetool, and since 1 November linuxdeploy, stop on AppDirs with mode 0700 and print an error for SVG icons, the three lines that clear both on old and new builds, and the order that works with linuxdeploy.
The continuous appimagetool, and since 1 November linuxdeploy, stop on an AppDir or AppRun with mode 0700. SVG icons stopped the 31 October build; since 1 November they print an error and a warning that a future release will refuse them. Tested lines that clear both, on old and new builds, with or without linuxdeploy.
Read the guide -
Guide · Home Assistant
Fix status for 65 custom integrations that import names Home Assistant 2026.11 removes: update in HACS, or stay on 2026.10 until the author ships a fix. Plus where each removed name comes from now.
Home Assistant 2026.11 removes names that some custom integrations import, so they fail with "ImportError: cannot import name … from homeassistant.components…". Fix status for 65 HACS and other integrations, what to do before and after you update, and where each name comes from now.
Read the guide -
Guide · Odoo
Odoo 20 plans manufacturing orders in list order. Sort by Deadline before you press Plan.
On a 72-order test shop, Plan from the default list left 20 orders late; one click on the Deadline header first left 0.
Read the guide -
Guide · Java
Jars fail to load at random on Oracle GraalVM for JDK 25: the JIT bug and a tested flag
"invalid header field (line 1)" or NoClassDefFoundError. With JFR on, one flag took broken JVMs from 39 of 48 to 0 in our runs.
Read the guide -
Guide · PostgreSQL
PostgreSQL 19 exits on 18 data (tested on the RC) when postgres:latest moves 19 November
Look for "Error: in 18+ … there appears to be PostgreSQL data in /var/lib/postgresql/18/docker". Pin postgres:18 or upgrade.
Read the guide -
Accessibility note · Public PDFs
We read 25 remediated public PDFs. 14 still had problems a screen reader would trip on.
The errors in 14 of 25, how a general-purpose AI assistant did on 6 of them, and the exact request to give yours before you post.
Read the note -
Guide · Time zones
Kubernetes CronJobs set to a US time zone at 01:00–01:59 run twice on 1 November 2026
In v1.37.2 scheduling code: Jobs at 01:30 EDT and 01:30 EST. A kubectl check, two changes that ran once, how to spot a double run.
Read the guide -
Guide · ADA Title II
ADA Title II web rule: your compliance date after the April 2026 extension
Deadlines moved by a year. Your date by type of government, which posted documents count, and the exact rule sentence for each.
Read the guide -
Guide · Node.js
corepack enable,yarnandpnpmfail with exit 127 on Node 26 Docker images"corepack: not found" (exit 127): Node 26 images have no Corepack or Yarn. Pin node:24, or add lines we checked on Node 24 and 26.
Read the guide -
Guide · Time zones
Spring @Scheduled jobs at 01:00–01:59 US time ran twice on 1 November 2026 in our tests
Tested on Spring Framework 6.2 and 7.0 and Boot 3.5 and 4.1. A test for your own cron expression and three changes that ran once.
Read the guide -
Check · Free, in your browser
Did your scheduled job run twice, loop or skip when the clocks went back?
Spring, Kubernetes, n8n, APScheduler, LiteLLM, Camunda 7, Operaton or CIB seven: the change we tested and what to do after.
Check a job -
Guide · PowerToys
PowerToys 0.102 broke Mouse Without Borders pairing: the check, rollback and a workaround
"Pairing could not be loaded or updated", and "New key" does nothing: the release files carry two Microsoft signing certificates.
Read the guide -
Guide · Java
Camunda 7, Operaton and CIB seven timer start events loop when clocks go back, measured
On a local-time JVM, every timer we tried fired for about an hour in our tests. A query lists yours; four changes stopped it.
Read the guide -
Guide · Time zones
Cuba keeps daylight saving time: America/Havana runs an hour behind without tz 2026f
On UTC−04 until 7 November 2027. Checks for Linux, Python, Node.js and Java, and a tested stopgap that switches itself off.
Read the guide -
Guide · n8n
n8n 2.44.7 ran daily Schedule Triggers at 02:00–02:59 twice on 1 November in our tests
New York, Chicago or Los Angeles: an hour early and on time. Moving out of 02:xx or using UTC ran once. Measured per release.
Read the guide -
Guide · Python
Which APScheduler 3.x and LiteLLM proxy versions hang when US clocks go back, measured
Jitter jobs at 01:00–01:59 looped on every 3.11 release in our test, LiteLLM's stagger even on 3.11.3. UTC stopped both.
Read the guide -
Guide · PHP
PHP2Shell interim mitigations: check that your web workers actually run them
php -v reads the CLI, not PHP-FPM or mod_php, and an nginx PHP_VALUE can undo a pool php_admin_value.
Read the guide -
Guide · Anthropic Python SDK
The anthropic Python SDK dropped temperature in 1.0, not 2.0, so anthropic<2 still fails
TypeError: Messages.create() got an unexpected keyword argument 'temperature'. Fixes by situation; 25 libraries tested.
Read the guide -
Guide · OpenAI API
OpenAI shuts down gpt-image-1-mini, gpt-image-1.5 and chatgpt-image-latest on 1 December: what to change
OpenAI now lists gpt-image-2.6 models as replacements. A one-line search for the three names, and the 23 October errors.
Read the guide -
Guide · OBS Studio
OBS Studio 33 browser sources can't reach localhost or LAN tools: the fix we tested
Sources set to "Local file" can't fetch; WebSockets work. Serving from http://127.0.0.1 fixed every request in our Linux test.
Read the guide -
Guide · GitHub SSH
GitHub SSH: new RSA keys under 3072 bits refused, and old clients failed in our test
"key is too short": Terraform's tls_private_key makes 2048-bit keys by default. Brownouts on 4 November and 9 December.
Read the guide -
Guide · MongoDB
MongoDB 8 service containers exit on GitHub's ubuntu-24.04 and 26.04 runners: five fixes
"Linux kernel versions 6.19 and newer has a known incompatibility" on a fixed kernel. mongo:9.0.4 starts. Tested, with a checker.
Read the guide -
Guide · PHP
php:8.6 Docker images drop pecl and built-in mbstring and go thread-safe, tested on RC4
"pecl: not found", no pear. The one-line mbstring fix, what install-php-extensions installs, why apcu and phpredis fail to build.
Read the guide -
Guide · Java
HttpClient 5 and AWS SDK v2 fail on jlink runtimes: add jdk.net (tested on JDK 21 and 25)
"NoClassDefFoundError: jdk/net/Sockets" at client creation, or hung async requests. Affects HttpClient 5.5.2+ and HttpCore 5.4+.
Read the guide -
Guide · Security
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35: is your Docker image or package patched?
Fixes CVE-2026-109618 and CVE-2026-109619. Read the PHP a container runs, which images update on rebuild, why Trivy can show none.
Read the guide -
Guide · CI
Playwright 1.60 fails to install on Ubuntu 26.04 (ubuntu-latest): upgrade to 1.61
"ERROR: Playwright does not support chromium on ubuntu26.04-x64". Or pin the job to ubuntu-24.04. Tested on Ubuntu 26.04.
Read the guide -
Census · Time zones
153 of 189 popular Docker images carry wrong tz data for Canadian zones after 1 November
Calgary, Edmonton, Inuvik, Winnipeg. Of 257 images scanned, 189 updated since July. Per-image data and the command to check yours.
Read the census -
Upstream fix · DNS
The DNS root changed its key on 11 October. Ubuntu 22.04 and 24.04 only knew the old one.
Why machines with DNSSEC on lost DNS after the root key change, what to do now, and how our tested backport got into Ubuntu.
Read the note -
Guide · Time zones
MongoDB, Elasticsearch, OpenSearch, Trino and DuckDB miss Canada's 1 November time change
They ignore the OS copy. Only Elasticsearch and DuckDB have releases with the new rules. One check and one tested fix for each.
Read the guide -
Guide · Time zones
Canada's November 1 time change: which runtimes are still an hour off, and tested fixes
Java, Go, PHP, Rust, Node.js, Kubernetes CronJobs, MySQL and MariaDB: checks for Alberta, the Northwest Territories and Manitoba.
Read the guide -
Security note · Supply chain
Apache Thrift fixed 61 CVEs on 30 September. Free scanners still report none of them.
Why osv-scanner, Trivy, pip-audit and npm audit miss them, where the package data is waiting, and what to do instead.
Read the note -
Guide · DNSSEC
DNSSEC broke after the October 11 root key roll: who is affected and the tested fix
SERVFAIL, missing-key or BOGUS DNSKEY? Fixes for systemd-resolved, Amazon Linux BIND, Unbound, PowerDNS, Pi-hole v5, OpenWrt.
Read the guide -
Guide · Socrata
Replace a Socrata rows.csv link without breaking your columns
Paste a rows.csv download link and get the query.csv replacement, the old column names and a pandas or R snippet.
Read the guide -
Guide · GitHub Pages
A green Pages upload can still omit your public endpoint
Stage reviewed public files, inspect the uploaded Pages archive, and check your well-known endpoint separately.
Read the guide -
Guide · AI SDK
AI SDK tool-loop recovery: check arguments, approval and history
Diagnose AI SDK tool-loop failures at argument, approval and provider-history boundaries.
Read the guide -
Guide · redirects
Before you replace Webflow redirects, check what disappears
A worked, made-up comparison of kept, changed and omitted redirect instructions.
Read the guide -
Security note
Skill directories are an instruction boundary
What to check when several agents share one operating-system user, and the fixes that bind.
Read the note -
Security note
Check that your PDF parser container is isolated
A runnable bundle that reads the isolation flags back from inside a pinned parser container, with a negative control.
Read the note
Parked and stopped
We are not developing these further, unless its line says so. Each stays online as a record.
-
Kit · Paid
Paid For: guardrails for Paperclip companies
Still on sale: Pack 1, or a monthly plan with new pairs each month.
-
Research
Kumo Label Lens — How far does one wrong label reach?
One tiny two-feature synthetic table, one seed, one checkpoint and fixed recipes.
-
Kit
State Lens
An offline synthetic exercise; no agent or model was run.
-
Research
BFCL quantization pilot
Selected cases; not a full leaderboard result.
-
Tool
ComfyUI workflow preflight
Qwen-Image-2.1 workflows only.
-
Research
GGUF repeat-run study
Two runs; timing did not consistently repeat.
-
Index
Breach Notice Index
Dated California filings; check the original notice.
Earlier projects and closed services are kept as records in the archive.