Tag

Databases

5 posts

November 2026

The Name That Matched Twice: Unicode Normalization, Grapheme Clusters, and Getting Bengali Text Right The same Bengali name can arrive as two different byte sequences, and your unique index, your search box and your audit log will each disagree about whether it is one … Engineering 26 min read

October 2026

The Primary Key That Knew What Time It Was: UUIDv7, RFC 9562, and Choosing Identifiers That Age Well RFC 9562 replaced the 2005 UUID specification in May 2024 and added UUIDv7: a 48-bit Unix millisecond timestamp followed by random bits, so identifiers sort by creation … Research 28 min read

August 2026

Retry Without Paying Twice: Idempotency Keys and the Draft That Expired in April Every payment API ships a header called Idempotency-Key, and no RFC defines it. The IETF draft that tried expired on 18 April 2026, is absent from the IANA field-name … Engineering 30 min read Audit Logs That Don't Lie: Engineering Trustworthy Audit Trails Most audit logs are diaries — written in good faith, full of gaps, and useless the day they matter. An audit log's actual job is to be believed under hostile questioning: … Engineering 19 min read

June 2026

The API Key Is the Tenant: Identity Models That Survive Multi-Tenancy Most cross-tenant data leaks are not exotic exploits; they are a missing WHERE clause, a trusted X-Tenant-ID header, or a query that resolved the tenant from one input … Engineering 19 min read

All posts