# Glossary

This site explains itself in public. The credits name every piece of technology
behind it, the notes argue about browser bugs, and the conformance claim cites
clauses by number — so a reader who follows any of that meets words that are
precise and unfamiliar at the same time.

Each one below gets a line. The name links to the people who define it, because
a summary is a place to start and a specification is the thing that is true.
Where the site has written a longer article about a word, the name opens the
article instead, and its further reading starts at that same source.


- [access control](https://csrc.nist.gov/glossary/term/access_control) — granting or refusing each request to use a resource
- [accessibility](https://www.w3.org/WAI/fundamentals/accessibility-intro/) — a site's fitness for people with disabilities
- [ACME](https://www.rfc-editor.org/rfc/rfc8555) — the protocol that issues a certificate without a human
- [alert](https://prometheus.io/docs/alerting/latest/overview/) — a message a system sends when something needs a person
- [animation](https://www.w3.org/TR/css-animations-1/) — a change in a page's look played out over time
- [Ansible](https://docs.ansible.com/ansible/latest/index.html) — a tool that puts a server into a written-down state
- [API](https://www.rfc-editor.org/rfc/rfc9110) — the described way one program calls another
- [app](https://csrc.nist.gov/glossary/term/application) — a program people use to get a task done
- [ArcGIS](https://developers.arcgis.com/documentation/) — Esri's commercial GIS platform
- [architecture](https://csrc.nist.gov/glossary/term/architecture) — how a system's parts fit together and why
- [ARIA](https://www.w3.org/TR/wai-aria-1.2/) — extra markup that names a control for assistive tech
- [authentication](https://pages.nist.gov/800-63-4/sp800-63b.html) — proof that a request is from who it claims
- [AWS](https://docs.aws.amazon.com/) — Amazon's cloud platform
- [axe](https://github.com/dequelabs/axe-core) — the accessibility engine this site is audited with
- [Azure](https://learn.microsoft.com/en-us/azure/) — Microsoft's cloud platform
- [backend](https://www.w3.org/TR/webarch/) — the half of a system the reader never loads
- [backup](https://csrc.nist.gov/glossary/term/backup) — a copy of data against loss, and the making of it
- [Bash](https://www.gnu.org/software/bash/manual/bash.html) — the GNU shell most scripts are written for
- [Bicep](https://learn.microsoft.com/en-us/azure/azure-resource-manager/bicep/overview) — Azure's own language for declaring infrastructure
- [BigQuery](https://cloud.google.com/bigquery/docs/introduction) — Google's warehouse for querying very large tables
- [blue-green deployment](https://martinfowler.com/bliki/BlueGreenDeployment.html) — switching live traffic between two identical environments
- [business intelligence](https://doi.org/10.1147/rd.24.0314) — turning a business's data into reports that guide decisions
- [button](https://www.w3.org/TR/wai-aria-1.2/#button) — a control a person presses to make something happen
- [cache](https://www.rfc-editor.org/rfc/rfc9111) — a stored copy a browser may reuse instead of asking
- [caching](https://www.rfc-editor.org/rfc/rfc9111#section-3) — keeping an answer so the work is not repeated
- [canary release](https://martinfowler.com/bliki/CanaryRelease.html) — releasing a change to a small share of users first
- [canonical URL](https://www.rfc-editor.org/rfc/rfc6596) — the one address a page says is its own
- [CDN](https://www.rfc-editor.org/rfc/rfc6707#section-1.1) — servers near the reader that hand out copies
- [change data capture](https://debezium.io/documentation/reference/stable/features.html) — reading the changes made in a database and passing them on
- [chaos engineering](https://principlesofchaos.org/) — controlled experiments that inject failure into production
- [CI](https://martinfowler.com/articles/continuousIntegration.html) — merging work at least daily, each merge proven by a build
- [CIDR](https://www.rfc-editor.org/rfc/rfc4632.html) — a way to write and route address blocks of any size
- [CLDR](https://cldr.unicode.org/) — Unicode's data on each locale's dates, numbers and sorting
- [cloud](https://csrc.nist.gov/pubs/sp/800/145/final) — computing rented by the hour from somebody else
- [code review](https://google.github.io/eng-practices/review/) — another person examining a change before it is merged
- [codebase](https://12factor.net/codebase) — all the source code of one app, kept in one repository
- [computer file](https://csrc.nist.gov/glossary/term/file) — a named set of data stored as one unit
- [configuration](https://csrc.nist.gov/glossary/term/configuration) — the settings that decide how a system behaves
- [connection pool](https://docs.sqlalchemy.org/en/21/core/pooling.html) — a set of open database connections kept ready for reuse
- [container runtime](https://github.com/opencontainers/runtime-spec) — the program that actually starts a container
- [Content Security Policy](https://www.w3.org/TR/CSP3/) — a list of where a page may load things from
- [contrast ratio](https://www.w3.org/TR/WCAG22/#dfn-contrast-ratio) — how far apart two colours are, as a number
- [cookie](https://www.rfc-editor.org/rfc/rfc6265) — a small value a site asks the browser to keep
- [Core Web Vitals](https://web.dev/articles/vitals) — three measurements of how a page feels to use
- [CORS](https://fetch.spec.whatwg.org/#http-cors-protocol) — how a server lets pages on other origins read its responses
- [crawler](https://www.rfc-editor.org/rfc/rfc9309) — a program that fetches pages to index them
- [cron](https://pubs.opengroup.org/onlinepubs/9799919799/utilities/crontab.html) — the Unix scheduler that runs the commands in a crontab
- [cross-site scripting](https://cwe.mitre.org/data/definitions/79.html) — an attack that gets a page to run an attacker's script
- [CSRF](https://cwe.mitre.org/data/definitions/352.html) — an attack that tricks a browser into an unwanted request
- [CSS](https://www.w3.org/TR/CSS/) — the language that says how a page looks
- [CTE](https://www.postgresql.org/docs/current/queries-with.html) — a named subquery a bigger query reads as a table
- [CVE](https://www.cve.org/About/Overview) — the public list giving each disclosed vulnerability one ID
- [daemon](https://man7.org/linux/man-pages/man7/daemon.7.html) — a program that runs in the background, unattended
- [dashboard](https://grafana.com/docs/grafana/latest/visualizations/dashboards/) — one screen built to answer a recurring question
- [data analytics](https://doi.org/10.6028/NIST.SP.1500-1r2) — processing data systematically to find patterns and trends
- [data lake](https://jamesdixon.wordpress.com/2010/10/14/pentaho-hadoop-and-data-lakes/) — a store that keeps raw data in its original form
- [data mesh](https://martinfowler.com/articles/data-mesh-principles.html) — domain teams serving their analytical data as products
- [data storage](https://csrc.nist.gov/glossary/term/storage) — keeping data, or the media that hold it, for later reading
- [data warehouse](https://www.kimballgroup.com/data-warehouse-business-intelligence-resources/kimball-techniques/technical-dw-bi-system-architecture/) — a database that gathers a business's data for analysis
- [database](https://csrc.nist.gov/glossary/term/database) — a store of data organised so that programs can query it
- [database index](https://www.postgresql.org/docs/current/indexes-intro.html) — a structure that finds table rows without a full scan
- [database normalization](https://doi.org/10.1145/362384.362685) — arranging tables so each fact is stored once, under its key
- [dataset](https://www.w3.org/TR/vocab-dcat-3/) — a collection of data published as one unit
- [defect](https://glossary.istqb.org/en_US/term/defect) — a flaw that keeps a product from meeting its requirements
- [deployment](https://12factor.net/build-release-run) — moving a change to where people actually use it
- [DevOps](https://csrc.nist.gov/glossary/term/development_operations) — practices that join software development and operations
- [DHCP](https://www.rfc-editor.org/rfc/rfc2131) — a protocol that leases IP addresses and settings to devices
- [disaster recovery](https://csrc.nist.gov/pubs/sp/800/34/r1/upd1/final) — getting service back after a major loss, by a tested plan
- [Django](https://docs.djangoproject.com/en/stable/) — a Python framework for building web applications
- [DNS](https://www.rfc-editor.org/rfc/rfc1035) — the directory turning a name into an address
- [Docker](https://docs.docker.com/) — a way to ship a program with everything it needs
- [DOM](https://dom.spec.whatwg.org/) — the live tree of objects a browser builds from a page
- [downtime](https://www.rfc-editor.org/rfc/rfc9110#section-15.6) — the stretch where a service answers nobody
- [email](https://www.rfc-editor.org/rfc/rfc5322) — mail sent between mailboxes across the internet
- [encryption](https://csrc.nist.gov/glossary/term/encryption) — making data unreadable without the key
- [end-to-end test](https://abseil.io/resources/swe-book/html/ch11.html) — a test that drives the whole system the way a user does
- [error budget](https://sre.google/sre-book/embracing-risk/) — the share of failures a reliability target still allows
- [ESLint](https://eslint.org/docs/latest/use/core-concepts/) — a rule-driven linter for JavaScript
- [ETL](https://www.postgresql.org/docs/current/sql-copy.html) — moving data between systems, reshaping it on the way
- [event sourcing](https://martinfowler.com/eaaDev/EventSourcing.html) — keeping state as the ordered log of events that changed it
- [exponential backoff](https://www.rfc-editor.org/rfc/rfc6298.html) — a retry pause that multiplies after every failure
- [favicon](https://html.spec.whatwg.org/multipage/links.html#rel-icon) — the small picture a browser shows beside a page
- [feature flag](https://martinfowler.com/articles/feature-toggles.html) — a switch that turns code on or off without a new deploy
- [feed](https://www.rfc-editor.org/rfc/rfc4287) — a page's updates, in a format you subscribe to
- [file system](https://pubs.opengroup.org/onlinepubs/9799919799/basedefs/V1_chap03.html#tag_03_153) — the structure that turns a disk into named files and folders
- [firewall](https://csrc.nist.gov/glossary/term/firewall) — the rule set that decides which traffic passes
- [font](https://www.w3.org/TR/css-fonts-4/) — a typeface in a file the page downloads
- [forge](https://forgefed.org/spec/) — a web platform where code is hosted, reviewed and shared
- [frontend](https://www.w3.org/TR/webarch/) — the half of a system that runs in the reader's browser
- [full-text search](https://www.postgresql.org/docs/current/textsearch-intro.html) — searching documents by their words, ranked by relevance
- [GDAL](https://gdal.org/en/stable/) — the library that reads every geospatial format
- [Gemini](https://geminiprotocol.net/docs/protocol-specification.gmi) — a lightweight internet protocol for serving hypertext
- [gemtext](https://geminiprotocol.net/docs/gemtext.gmi) — a text format with one link per line
- [GeoJSON](https://www.rfc-editor.org/rfc/rfc7946) — geography written as JSON
- [geospatial](https://www.ogc.org/standards/) — data whose meaning depends on where it is
- [GIS](https://docs.qgis.org/latest/en/docs/gentle_gis_introduction/) — systems for data that has a place on a map
- [git](https://git-scm.com/doc) — the version control this site's history lives in
- [git hook](https://git-scm.com/docs/githooks) — a script git runs when something happens
- [GitHub](https://docs.github.com/) — Microsoft's hosting for git repositories
- [GitLab](https://docs.gitlab.com/) — a git platform you can also run yourself
- [GitOps](https://opengitops.dev/) — running infrastructure from a desired state kept in Git
- [Go](https://go.dev/ref/spec) — a compiled, strongly typed, garbage-collected language
- [Google Cloud](https://cloud.google.com/docs) — Google's cloud platform
- [Gopher](https://www.rfc-editor.org/rfc/rfc1436) — a menu protocol older than the web
- [Grafana](https://grafana.com/docs/grafana/latest/introduction/) — a dashboard tool for metrics and logs
- [GraphQL](https://spec.graphql.org/) — a query language in which the client picks the fields
- [gRPC](https://grpc.io/docs/what-is-grpc/core-concepts/) — a framework for calling remote procedures over HTTP/2
- [hardening](https://csrc.nist.gov/glossary/term/hardening) — removing what an attacker could use
- [hardware](https://csrc.nist.gov/glossary/term/hardware) — the physical parts of a computer
- [health check](https://docs.docker.com/reference/dockerfile/#healthcheck) — an automated test of whether a service is working
- [high availability](https://clusterlabs.org/) — the ability of a service to keep running when a part fails
- [host](https://csrc.nist.gov/glossary/term/host) — a computer attached to a network
- [hreflang](https://html.spec.whatwg.org/multipage/links.html#attr-hyperlink-hreflang) — the attribute pairing a page with its translations
- [HSTS](https://www.rfc-editor.org/rfc/rfc6797) — a browser's promise to use HTTPS next time
- [HTML](https://html.spec.whatwg.org/multipage/) — the language a page's structure is written in
- [HTTP](https://www.rfc-editor.org/rfc/rfc9110) — the request and answer the web is built on
- [HTTPS](https://www.rfc-editor.org/rfc/rfc9110#name-https-uri-scheme) — the same requests, over an encrypted connection
- [idempotent](https://www.rfc-editor.org/rfc/rfc9110#name-idempotent-methods) — safe to run twice, because the second time changes nothing
- [immutable infrastructure](https://developer.hashicorp.com/well-architected-framework/define-and-automate-processes/define/immutable-infrastructure) — replacing servers instead of changing them in place
- [incident](https://csrc.nist.gov/glossary/term/incident) — an event that puts a system's data or service at risk
- [information security](https://csrc.nist.gov/glossary/term/information_security) — protecting data and systems from misuse and harm
- [infrastructure as code](https://csrc.nist.gov/pubs/sp/800/204/c/final) — managing infrastructure from versioned definition files
- [internationalization](https://www.w3.org/International/questions/qa-i18n#i18n) — designing software so that it can easily be localized
- [IP address](https://www.rfc-editor.org/rfc/rfc791.html) — a number that tells the network where to deliver a packet
- [IPv6](https://www.rfc-editor.org/rfc/rfc8200.html) — the version of the Internet Protocol with 128-bit addresses
- [JavaScript](https://tc39.es/ecma262/) — the language browsers run
- [JSON](https://www.rfc-editor.org/rfc/rfc8259) — the text format most data travels in
- [JSON Schema](https://json-schema.org/specification) — a language for describing the shape of JSON data
- [JWT](https://www.rfc-editor.org/rfc/rfc7519) — a compact, URL-safe token that carries claims as JSON
- [kernel](https://docs.kernel.org/admin-guide/index.html) — the core of an operating system
- [Kubernetes](https://kubernetes.io/docs/concepts/overview/) — a system that keeps a fleet of containers running
- [landmark](https://www.w3.org/TR/wai-aria-1.2/#landmark_roles) — a region of a page a screen reader can jump to
- [large language model](https://doi.org/10.6028/NIST.AI.600-1) — a neural network trained on text to predict the next token
- [latency](https://www.rfc-editor.org/rfc/rfc2681) — the wait between asking and the first of the answer
- [lazy loading](https://html.spec.whatwg.org/multipage/urls-and-fetching.html#lazy-loading-attributes) — loading something only when it is first needed
- [Leaflet](https://leafletjs.com/) — a small library for maps in a browser
- [library](https://tldp.org/HOWTO/Program-Library-HOWTO/introduction.html) — code packaged for other programs to call
- [Lighthouse](https://developer.chrome.com/docs/lighthouse/overview) — Chrome's own audit of speed, markup and good practice
- [linter](https://man.netbsd.org/lint.1) — a tool that flags likely bugs in code without running it
- [Linux](https://www.kernel.org/linux.html) — the kernel most servers run on
- [load balancer](https://nginx.org/en/docs/http/load_balancing.html) — a server that spreads requests across several others
- [load test](https://grafana.com/docs/k6/latest/testing-guides/test-types/) — a test that measures a system under simulated traffic
- [localization](https://www.w3.org/International/questions/qa-i18n#l10n) — adapting software to one market's language and conventions
- [logging](https://opentelemetry.io/docs/concepts/signals/logs/) — writing down what happens, as it happens
- [machine learning](https://scikit-learn.org/stable/user_guide.html) — building software that learns a task from examples in data
- [macOS](https://support.apple.com/guide/mac-help/welcome/mac) — Apple's desktop operating system
- [Mapbox](https://docs.mapbox.com/help/getting-started/) — a commercial source of map tiles and styles
- [Markdown](https://spec.commonmark.org/) — plain text with a few marks that mean formatting
- [materialized view](https://www.postgresql.org/docs/current/rules-materializedviews.html) — a view that stores the result of its query like a table
- [metadata](https://www.rfc-editor.org/rfc/rfc9110#section-6.3) — the data describing other data, so it can be found
- [metrics](https://opentelemetry.io/docs/concepts/signals/metrics/) — numbers a system reports about itself
- [microservices](https://martinfowler.com/articles/microservices.html) — an architecture of small services, each deployed on its own
- [migration](https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/migrate/) — a planned move to a new version or platform
- [monitoring](https://prometheus.io/docs/introduction/overview/) — watching a running system so it tells you first
- [multi-factor authentication](https://pages.nist.gov/800-63-4/sp800-63b.html#def-and-acr) — sign-in that needs two or more different kinds of proof
- [NAT](https://www.rfc-editor.org/rfc/rfc3022.html) — the rewriting of IP addresses as packets pass a router
- [network server](https://csrc.nist.gov/glossary/term/server) — a computer or program that serves others over a network
- [Next.js](https://nextjs.org/docs) — a React framework for building web apps
- [nginx](https://nginx.org/en/docs/) — a web server and reverse proxy
- [OAuth](https://www.rfc-editor.org/rfc/rfc6749) — a way to give an app limited access without a password
- [observability](https://opentelemetry.io/docs/concepts/observability-primer/) — understanding a system from the outside, from what it emits
- [onion service](https://spec.torproject.org/rend-spec/) — an address that works only through Tor
- [OpenAPI](https://spec.openapis.org/oas/latest.html) — a machine-readable description of an HTTP API
- [OpenID Connect](https://openid.net/specs/openid-connect-core-1_0.html) — an identity layer on top of OAuth for signing users in
- [OpenTelemetry](https://opentelemetry.io/docs/what-is-opentelemetry/) — one vendor-free way to send telemetry
- [operating system](https://csrc.nist.gov/glossary/term/operating_system) — the software that manages hardware for every other program
- [operational secret](https://cheatsheetseries.owasp.org/cheatsheets/Secrets_Management_Cheat_Sheet.html) — a credential a program needs, like a key or a password
- [ORM](https://martinfowler.com/eaaCatalog/) — a library that maps database tables to objects in code
- [package](https://docs.npmjs.com/about-packages-and-modules) — code bundled with a description, ready to install
- [partitioning](https://www.postgresql.org/docs/current/ddl-partitioning.html) — splitting one table into physical pieces
- [password](https://csrc.nist.gov/glossary/term/password) — a secret string that proves who is signing in
- [penetration test](https://csrc.nist.gov/pubs/sp/800/115/final) — an authorised attack that shows which flaws can be exploited
- [PHP](https://www.php.net/manual/en/introduction.php) — the language most of the old web runs on
- [pipeline](https://airflow.apache.org/docs/apache-airflow/stable/index.html) — a run of steps carrying data from source to use
- [Playwright](https://playwright.dev/docs/intro) — the tool that drives a browser in tests
- [Podman](https://docs.podman.io/en/latest/) — a container engine that needs no daemon
- [port](https://www.rfc-editor.org/rfc/rfc9293#section-4) — the number that picks a service on a host
- [PostGIS](https://postgis.net/documentation/) — the extension that gives PostgreSQL geometry
- [PostgreSQL](https://www.postgresql.org/docs/current/intro-whatis.html) — the database most of this work was built on
- [postmortem](https://sre.google/sre-book/postmortem-culture/) — a written review of an incident, made to stop it recurring
- [privilege](https://csrc.nist.gov/glossary/term/privilege) — a right a system grants to a person or process
- [progressive enhancement](https://www.gov.uk/service-manual/technology/using-progressive-enhancement) — building pages that work in plain HTML, then adding more
- [progressive web app](https://www.w3.org/TR/appmanifest/) — a website that can be installed and run like an app
- [Prometheus](https://prometheus.io/docs/introduction/overview/) — a database that scrapes and stores metrics
- [protocol](https://csrc.nist.gov/glossary/term/protocol) — the agreed rules two programs follow to talk
- [proxy](https://www.rfc-editor.org/rfc/rfc9110#section-3.7) — a server that forwards a request on your behalf
- [Python](https://docs.python.org/3/) — the language most of this site's tooling is in
- [QGIS](https://docs.qgis.org/latest/en/docs/user_manual/preamble/foreword.html) — the free desktop GIS
- [quality gate](https://docs.sonarsource.com/sonarqube-cloud/standards/managing-quality-gates/introduction-to-quality-gates) — a set of checks code must pass before it moves on
- [query](https://www.postgresql.org/docs/current/sql-select.html) — a written question a database answers
- [queue](https://www.rabbitmq.com/tutorials/amqp-concepts) — work left in order for something else to pick up
- [RAID](https://www2.eecs.berkeley.edu/Pubs/TechRpts/1987/5853.html) — several disks run as one, usually so one can fail safely
- [rate limiting](https://www.rfc-editor.org/rfc/rfc6585.html#section-4) — a cap on how many requests a client may send per interval
- [RBAC](https://csrc.nist.gov/projects/role-based-access-control) — permissions granted to a role, not a person
- [Redis](https://redis.io/docs/latest/develop/) — an in-memory store for things that live briefly
- [refactoring](https://martinfowler.com/bliki/DefinitionOfRefactoring.html) — changing code's structure without changing what it does
- [regular expression](https://pubs.opengroup.org/onlinepubs/9799919799/basedefs/V1_chap09.html) — a pattern that describes which strings count as a match
- [replication](https://www.postgresql.org/docs/current/high-availability.html) — keeping copies of a database in step on other servers
- [repository](https://git-scm.com/docs/gitglossary#def_repository) — a store that keeps saved versions of a set of files
- [responsive design](https://alistapart.com/article/responsive-web-design/) — a layout that adapts to whatever screen it is read on
- [REST](https://ics.uci.edu/~fielding/pubs/dissertation/rest_arch_style.htm) — the web's architectural style, built around resources
- [retrieval-augmented generation](https://arxiv.org/abs/2005.11401) — generating answers from documents retrieved per question
- [robots.txt](https://www.rfc-editor.org/rfc/rfc9309) — the file telling crawlers where not to go
- [RSS](https://www.rssboard.org/rss-specification) — the older of the two XML formats a feed is written in
- [Ruff](https://docs.astral.sh/ruff/) — a fast linter and formatter for Python
- [Rust](https://doc.rust-lang.org/book/) — a compiled language that checks memory for you
- [S.M.A.R.T.](https://www.smartmontools.org/) — a disk's built-in self-check that warns of coming failure
- [scalability](https://www.rfc-editor.org/rfc/rfc9110#section-3.3) — whether more load needs more than more machines
- [schema](https://www.postgresql.org/docs/current/ddl-schemas.html) — a named group of tables inside one database
- [screen reader](https://www.w3.org/WAI/people-use-web/tools-techniques/) — software that reads a page aloud, or into braille
- [semantic versioning](https://semver.org/) — a version-number scheme that signals breaking changes
- [SEO](https://developers.google.com/search/docs/fundamentals/seo-starter-guide) — making a page findable without paying for it
- [server-sent events](https://html.spec.whatwg.org/multipage/server-sent-events.html) — a one-way stream of events from a server over HTTP
- [server-side rendering](https://nextjs.org/docs/pages/building-your-application/rendering/server-side-rendering) — producing a page's HTML on the server for each request
- [serverless](https://github.com/cncf/wg-serverless/tree/master/whitepapers/serverless-overview) — running code without managing the servers it runs on
- [service level objective](https://sre.google/sre-book/service-level-objectives/) — a measurable reliability target that a service must meet
- [service worker](https://www.w3.org/TR/service-workers/) — a script that answers requests when the network cannot
- [single-page application](https://nextjs.org/docs/app/guides/single-page-applications) — a web app that loads one page and changes it with JavaScript
- [sitemap](https://www.sitemaps.org/protocol.html) — a list of a site's pages, written for machines
- [software](https://csrc.nist.gov/glossary/term/software) — the programs and data a computer runs
- [SQL](https://www.postgresql.org/docs/current/sql.html) — the language relational databases answer
- [SQL injection](https://cwe.mitre.org/data/definitions/89.html) — an attack that turns input into part of a database query
- [SQL Server](https://learn.microsoft.com/en-us/sql/sql-server/what-is-sql-server) — Microsoft's relational database
- [SQLite](https://sqlite.org/about.html) — a whole database in a single file
- [SSH](https://www.rfc-editor.org/rfc/rfc4251) — an encrypted shell on another machine
- [SSRF](https://cwe.mitre.org/data/definitions/918.html) — an attack that makes a server fetch a URL the attacker chose
- [star schema](https://www.kimballgroup.com/data-warehouse-business-intelligence-resources/kimball-techniques/dimensional-modeling-techniques/star-schema-olap-cube/) — a layout with one fact table and dimension tables around it
- [static site generator](https://gohugo.io/about/introduction/) — a program that writes every page out in advance
- [structured data](https://schema.org/) — facts about a page, written for machines
- [stylesheet](https://www.w3.org/TR/cssom-1/#css-style-sheet) — the file that holds a page's CSS
- [Subresource Integrity](https://www.w3.org/TR/SRI/) — a hash a browser checks a file against
- [SVG](https://www.w3.org/TR/SVG2/) — an XML language for drawing graphics that scale
- [systemd](https://man7.org/linux/man-pages/man1/systemd.1.html) — the thing that starts everything else on Linux
- [technical debt](https://c2.com/doc/oopsla92.html) — the extra cost later of a quick, expedient choice made now
- [Terraform](https://developer.hashicorp.com/terraform/intro) — HashiCorp's tool that plans and applies infrastructure code
- [test-driven development](https://newsletter.kentbeck.com/p/canon-tdd) — writing the test before the code, one small test at a time
- [TLS](https://www.rfc-editor.org/rfc/rfc8446) — the handshake that encrypts a connection
- [Tor](https://spec.torproject.org/) — a network that routes traffic through volunteer relays
- [transaction](https://www.postgresql.org/docs/current/tutorial-transactions.html) — a group of database changes that succeed or fail as one
- [TypeScript](https://www.typescriptlang.org/docs/) — JavaScript with types checked before it runs
- [Ubuntu](https://ubuntu.com/server/docs) — a Linux distribution common on servers
- [UI](https://csrc.nist.gov/glossary/term/user_interface) — the part of a program a person sees and works with
- [Unicode](https://www.unicode.org/standard/standard.html) — the standard that gives every character a number of its own
- [unit test](https://docs.python.org/3/library/unittest.html) — an automated check of one small piece of code in isolation
- [URL](https://www.rfc-editor.org/rfc/rfc3986) — the address that says where a thing is
- [user](https://csrc.nist.gov/glossary/term/user) — a person, or a process acting for one, allowed into a system
- [UTF-8](https://www.unicode.org/versions/Unicode18.0.0/core-spec/chapter-3/#G27817) — the Unicode encoding with one to four bytes per character
- [validation](https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html) — checking input against the rules before trusting it
- [vector search](https://github.com/pgvector/pgvector) — finding stored items whose vectors lie closest to a query
- [viewport](https://www.w3.org/TR/css-viewport-1/) — the part of a page a window actually shows
- [virtual machine](https://csrc.nist.gov/pubs/sp/800/125/final) — a whole computer run in software on a physical host
- [VPN](https://www.rfc-editor.org/rfc/rfc4026#section-3.10) — a private network carried over a public one
- [WCAG 2.2](https://www.w3.org/TR/WCAG22/) — the accessibility standard this site is held to
- [web app manifest](https://www.w3.org/TR/appmanifest/) — the file that lets a site be installed
- [web browser](https://csrc.nist.gov/glossary/term/web_browser) — the program a person uses to open web pages
- [web components](https://html.spec.whatwg.org/multipage/custom-elements.html) — browser features for defining new, reusable HTML elements
- [WebAssembly](https://webassembly.github.io/spec/core/) — a portable binary code format that runs in a sandbox
- [webhook](https://github.com/standard-webhooks/standard-webhooks/blob/main/spec/standard-webhooks.md) — an HTTP request a service sends when an event happens
- [WebP](https://developers.google.com/speed/webp) — an image format smaller than the ones it replaces
- [website](https://csrc.nist.gov/glossary/term/website) — a set of related web pages under one address
- [WebSocket](https://www.rfc-editor.org/rfc/rfc6455) — a protocol for a two-way connection that stays open
- [WordPress](https://wordpress.org/documentation/) — the CMS most of the web is published with
- [YAML](https://yaml.org/spec/1.2.2/) — a format for settings a person can still read
- [zero trust](https://csrc.nist.gov/pubs/sp/800/207/final) — a model that grants no trust on network location alone

<https://engineer.company/glossary/>