Writing

Notes from the build

Portfolio summaries only, written as I ship. When a piece is published, the title links out to Hashnode.

• Upcoming#multi-tenant#prisma#architecture

  Why Rivet defers Postgres RLS for CLS + Prisma tenant scoping

  Application-layer isolation is enough when one Nest service owns the database. When RLS becomes worth the ops cost — and how jobs and webhooks stay on the same path.

• Upcoming#concurrency#apis

  Field-level concurrency without CRDTs

  CAS on status and assignee, content-hash checks on descriptions, LWW elsewhere: a pragmatic policy for issue trackers that avoids collaborative-editing infrastructure.

• Upcoming#jobs#saas

  Always-async CSV export in a multi-tenant API

  202 + poll, org quotas, idempotency keys, signed URLs, and tenant context inside BullMQ workers — without holding a DB transaction across file I/O.

• Upcoming#auth#security

  Cross-origin SPA auth: access JWT + httpOnly refresh

  Vercel frontend, Render API, SameSite=None cookies, rotation, and why org context stays out of the access token.