357 Seconds per Push, and the Tests Were Not the Problem
Our pre-push gate took almost six minutes. The container read the repository through a bind mount, and that alone accounted for 324 of the 357 seconds.
Patrick Lehmann
6 min read
Category
Engineering
How systems actually get built: architecture decisions, data models, tests, and the trade-offs behind them.
6 posts
Back to all posts
CI/CD Analytics: Where Pipeline Time Really Goes
A slow or failed pipeline is only a symptom. Workbench connects wasted runner time, job trends, and pipeline waterfalls in one investigation—from the aggregate signal to the exact merge request attempt.
Patrick Lehmann
7 min read
Never Release to Test: Why we had to shift CI and AI agent governance left
16,300 CI minutes in a single week, 18.9% complete waste, and 22 release attempts for a single app: Why releases were abused as test environments, how AI agents silently ignore uninitialised standards, and how a three-tiered filter solved the problem.
Patrick Lehmann
5 min read
Boards: a kanban that doesn't know where its cards are
Every board eventually fails the same way — it remembers which column a card is in, and from then on that memory has to be maintained. Workbench never records it: columns are rules, evaluated on read.
Patrick Lehmann
10 min read
Workbench: a delivery index that is allowed to be wrong
We built a multi-tenant view across several GitLab instances without becoming a second source of truth. The design rule that made it work: the local database is disposable, and reconciliation — not webhooks — is what makes it correct.
Patrick Lehmann
6 min read
Env Manager: a secrets store that cannot read its own secrets
A security review pointed out that our secrets manager trusted its own administrators. The fix was zero-knowledge end-to-end encryption — and the honest part of the design is the list of three places where the server still sees plaintext, and why we accepted each one.
Patrick Lehmann
6 min read