Insights

Written for the people who will maintain it.

Notes on the decisions that turn out to matter later: how a system is shaped, what it costs to change, and which shortcuts are paid for twice. Nothing here is gated.

Articles: 6 published
Subjects: 6 categories
Access: No sign-up, no download form

01FEATURED

Hiding the button is not authorisation

A pattern seen in many applications: permissions enforced by not rendering the delete button. Here is the failure mode, and the pattern that actually works.

Read the article

Subject: Security
Length: 2 min read
Published: September 8, 2026
Tags: authorisationrbaccode-review

02Set the performance budget before you open the design toolPerformance work after launch is remediation, and remediation is expensive. Deciding the budget at the start changes what gets designed in the first place.Web2 min readSep 8, 2026performancecore-web-vitalsprocess
03Database constraints are the only documentation that cannot go staleApplication-level validation drifts. A foreign key does not. An argument for pushing more of your rules down into the schema.Software2 min readSep 8, 2026postgresqldata-modellingmaintainability
04A backup you have never restored is a belief, not a backupThe backup job reports success every night. That tells you a file was written. It tells you nothing about whether you can get your business back.Cloud3 min readSep 8, 2026backupsdisaster-recoveryoperations
05You probably do not need a mobile appAn honest decision framework for organisations being told they need to be in the app stores, from a company that builds mobile applications.Business Technology3 min readSep 8, 2026mobilescopingprocurement
06Where a language model earns its place in a productMost problems described to us as AI problems are search, classification or data quality problems. Here is how we tell the difference, and how we design for wrong answers.AI2 min readSep 8, 2026llmarchitectureproduct

Written for the people who will maintain it.

Filter by subject

All articles

Hiding the button is not authorisation