Blog
Engineering notes on backend and security
Go Authz: Building Authentication and Authorization for Multi-Tenant Systems
An internal Go service for tenant-scoped identity: opaque rotating refresh tokens with reuse detection, ES256 key rotation, Argon2id, and authorization resolved in two database queries for an existing, active user — including the cross-tenant bugs the review process caught.
Go Durable Jobs: Building a PostgreSQL-Backed Job Processor in Go
A Go job processor built on PostgreSQL: idempotent enqueue, concurrent claiming with SELECT ... FOR UPDATE SKIP LOCKED, exponential retries with jitter, a logical dead-letter queue, graceful shutdown, and Prometheus metrics — with explicit limits and no overclaimed guarantees.
Aegis: secure WASM execution with signed receipts and capability-based sandboxing
A Rust runtime that applies a fail-closed security model to WASM execution: capability-based host functions instead of WASI, signed and hash-chained receipts (Ed25519 + BLAKE3), two-phase execution (prepare/commit/abort), and hard resource limits, all exposed over gRPC with mutual TLS.