Blog
All Posts
Notes on backend engineering, system design, and what I learn building production software.
2026-07-23Pinned
Designing RBAC with Independent Org and Team Roles
Clustra's hierarchy: Org, Team, Project, Task. Membership layering, cascade deletes, and centralized permission checks.
Read → 2026-07-27PinnedHow gatevault Handles Authentication in Python
Every public function, class, and exception in gatevault, with code examples showing password hashing, JWT token management, OAuth2 login, and route protection.
Read → 2026-07-21PinnedWhy I Built gatevault and What Packaging for PyPI Taught Me
Most auth libraries do one thing. I kept solving the same auth problem across projects, so I packaged the solution.
Read → 2026-07-20How I Prevented Cross-Tenant Data Leaks in a Flask App
How the Business Dashboard enforces per-tenant data isolation at the ORM layer. Why controller checks alone are not enough.
Read → 2026-07-01Collision-Free URL Shortening with PostgreSQL Sequences and Base62
How Snip generates unique short codes without UUIDs, retry loops, or database-level locking. The flush bug that only appeared under load.
Read →