Blogs (3)
Notes on backend systems, APIs, and the trade-offs behind real software.
- Jul 16, 2026 1 min read Multi-tenant isolation with Postgres Row-Level Security Why I let the database enforce tenant boundaries instead of trusting every query to remember a WHERE clause.
- Jul 04, 2026 1 min read Refresh token rotation, and catching token theft Rotating refresh tokens on every use, grouping them into families, and revoking the whole family when an old one comes back.
- Jun 20, 2026 1 min read Guardrails for an LLM chatbot on Amazon Bedrock Keeping a healthcare chatbot on-topic and safe with Amazon Bedrock Guardrails, not just prompt instructions.