Insights

Written for the people who will maintain it.

Notes on the decisions that turn out to matter later: how a system is shaped, what it costs to change, and which shortcuts are paid for twice. Nothing here is gated.

Articles: 6 published
Subjects: 6 categories
Access: No sign-up, no download form

01FEATURED

Hiding the button is not authorisation

Every few months we review an application where permissions are enforced by not rendering the delete button. Here is the failure mode, and the pattern that actually works.

Read the article

Subject: Security
Length: 2 min read
Published: August 29, 2026
Written by: Content Manager
Tags: authorisationrbaccode-review

02Set the performance budget before you open the design toolPerformance work after launch is remediation, and remediation is expensive. Deciding the budget at the start changes what gets designed in the first place.Web2 min readAug 17, 2026performancecore-web-vitalsprocess
03Database constraints are the only documentation that cannot go staleApplication-level validation drifts. A foreign key does not. An argument for pushing more of your rules down into the schema.Software2 min readAug 4, 2026postgresqldata-modellingmaintainability
04A backup you have never restored is a belief, not a backupThe backup job reports success every night. That tells you a file was written. It tells you nothing about whether you can get your business back.Cloud3 min readJul 21, 2026backupsdisaster-recoveryoperations
05You probably do not need a mobile appAn honest decision framework for organisations being told they need to be in the app stores, from a company that builds mobile applications.Business Technology3 min readJul 7, 2026mobilescopingprocurement
06Where a language model earns its place in a productMost problems described to us as AI problems are search, classification or data quality problems. Here is how we tell the difference, and how we design for wrong answers.AI2 min readJun 23, 2026llmarchitectureproduct

Written for the people who will maintain it.

Filter by subject

All articles

Hiding the button is not authorisation