Fintech9 min min read
Designing idempotent payment APIs that survive retries
Idempotency keys, deterministic state machines, and reconciliation as a first-class concern.
Insights
Notes from the engineering floor.
Practical writing on the systems we build — architecture, infrastructure, fintech, and security.
Engineering11 min min read
Offline-first mobile, without the pain
What we've learned from running field operations in environments where connectivity is the exception.
Infrastructure14 min min read
Running PostgreSQL in production — the boring version
Replication, PITR, vacuum, observability — the unglamorous work that keeps your database boring.
Security8 min min read
Threat modeling as a daily practice, not a Q4 exercise
Why the threat models that actually protect systems are the ones updated at PR time — not at audit time.
Cloud7 min min read
Cloud spend discipline starts on day one
Cost guardrails before code, tagged resources, and the quiet 20-30% bill reductions that come with them.
AI10 min min read
RAG without the magic: what actually makes retrieval work in production
The boring parts of retrieval-augmented generation: chunking, hybrid search, and the eval suite that decides everything.