Engineering
Security, identity, and the boring infra it takes to make auth feel boring.
A per-tenant SHA-256 chain + advisory locks. Why we picked this design over append-only Postgres logical replication.
How a 200-line slog.Handler wrapper made our structured logs SOC-2 friendly without changing a single call site.
JWKS rotation is invisible until it breaks. Mandatory kid headers + a retired-key window made our rotation safe.