writing

Engineering notes

Notes from building systems that hold real money and real people's data. No listicles — the problems here are ones I have actually had to solve.

0103 Sept 2026· 3 min
Multi-tenant scoping in PostgreSQL that survives a rewrite
Every tenant table carries the organisation, every query goes through one layer that puts it there, and a build-time check fails the build if application code ever reaches the database directly. The discipline is the design.
read it
0220 Aug 2026· 3 min
How I structure role-based access in business applications
Hiding a button is not security. A permission model that survives contact with a real business needs one catalogue, enforcement in the service layer, and a short list of actions that only two people may ever perform.
read it

Multi-tenant scoping in PostgreSQL that survives a rewrite