How it is
actually built
Decisions taken in this codebase, including the trade-offs we would rather not have made. Everything here is checkable against the source.
Decisions taken in this codebase, checkable against the source.
- 01
Security
Tenant isolation belongs in the database, not the ORM
Every multi-tenant bug we have seen has the same shape: a query that forgot its WHERE clause. Row-level security makes that failure return nothing instead of everything.
6 min read - 02
Engineering
Idempotency is a table, not a convention
A retry after a dropped connection is indistinguishable from a second request. The only way to tell them apart is to have written the first one down.
5 min read - 03
Security
An audit log you cannot quietly edit
An append-only table is a policy. A hash chain is a property. The difference matters when the person you are proving something to does not trust your database administrator.
7 min read - 04
Architecture
Why the marketing site and the app share one origin
Splitting to www. and app. is the default. It costs SEO authority, complicates cookies, and breaks attribution — and an edge router removes the reason for it.
5 min read - 05
Engineering
Counting facets that do not collapse when you click them
A filter chip showing '0' the moment you select it is technically accurate and completely useless. The fix is one line, in the right place.
4 min read
Ready to build
smarter operations?
Join the organisations replacing manual operations with governed autonomy. Your first application is live today.
Operate smarter. Achieve more.