An S3 access fork separates immediate reads from restoration followed by reads; a clock marks the restoration stage without a promised duration.

S3 storage classes trade cost for access

A storage class changes retrieval behavior, resilience, and billing, not just the monthly price of bytes. Start with the time allowed to recover data and whether another copy can be recreated. Standard-IA offers immediate access with retrieval charges; Glacier Flexible Retrieval and Deep Archive require restoration before ordinary reads. One Zone-IA also has a different failure boundary: its data is not resilient to physical loss of its Availability Zone. ...

September 30, 2026 · 5 min · XB Field Notes
Historical PostgreSQL article fixture, not rerun: a deadline divides accepted fresh password login from rejected fresh password login. A held session continues across the boundary. Other authentication paths have different rules.

Credential expiry needs an enforcing verifier

A credential expires only when the system deciding access checks an applicable deadline. Writing an expiry date in an inventory does not change what a database or API accepts. A short lifetime can reduce the period during which a stolen credential starts new access, but its effect depends on the authentication mechanism and on what happens to sessions or other credentials already created with it. ...

September 27, 2026 · 6 min · XB Field Notes