from the lab
How I actually build these systems — in the open.
all posts
newest firststripe · payments · webhooks
Stripe webhooks that survive production: the 6 failures (and how to fix each)
Your Stripe webhook works on localhost, fires in test mode, then goes silent in production. It's almost always one of these six — plus the one that quietly double-charges customers.
security · postgres · aiI attacked my own AI SQL agent: 5 ways an LLM bypasses row-level security
RLS scopes rows by a setting the query can change. The prompt can't stop it — the connection has to. Five real bypasses, and the fix for each.
newsletter
get new posts by email
A note when something new lands. Building notes, no spam — unsubscribe any time.