pixa/TODO.md

Workflow

• branch per issue from next
• do the work in Next Step
• delete Next Step from TODO.md
• TODO.md merges with git's union merge (.gitattributes), which never reports a conflict: read the merged entries after every merge or rebase
• move the top item of Future Steps into Next Step
• commit (TODO.md changes in the same commit as the work)
• open a PR based on next
• an independent reviewer who did not write the change gates it
• the manager squash-merges the PR into next once review passes
• next stays green and mergeable to main at any time; only the owner merges next into main, via the single milestone PR
• push

Status

pre-1.0. The 1.0.0 milestone is in progress.

Next Step

P2: security: per-origin rate limiting

Future Steps

• P2: HTTP response handling
  • Last-Modified headers
• P2: operational
  • Prometheus metrics still missing:
    • cache hits and misses, split into source images and variants
    • cache size on disk and its limit
    • evictions and the bytes they free
    • upstream fetch duration and errors
    • transcode duration
    • images in processing
  • measure the 1k to 5k req/s target with script/loadtest on a machine not shared with other work