Notes from the build

Things I write down while shipping.

Short technical notes from the products on this site.

• Holding a seat without confirming itOn SITZY, an unpaid booking still occupies inventory. Confirm has to re-check that hold, and a QR scan cannot check someone in twice.PostgreSQL · 2026-07-12
• Three Next.js apps, one privacy boundaryDPDPA TrustOS splits marketing, dashboard, and Privacy Centre so crawlable pages and principal data never share a robots policy.Next.js · 2026-05-20
• Four Node processes behind IISTrustOS deploy docs put ARR in front of four local ports and run the apps as Windows services. Mail that cannot send is skipped, not faked.Deployment · 2026-04-08
• Don't scan the whole database to classify PIITrustOS discovery samples stores in chunks, retries, then pauses. Simulated connectors stay labelled so they cannot pass as verification.Performance · 2026-03-18
• The server clock is not the user's dayNIWA stores UTC and IANA timezones, then computes check-ins and reminder windows in the user timezone. Cron jobs take a Postgres advisory lock.Node.js · 2026-02-04
• COD is not a payment statusShopenup treats cash on delivery as an advance plus remaining cash, then waits for merchant accept before a courier label exists.APIs · 2025-12-11
• Consent as a hash chainTrustOS consent is a ledger with tenant-scoped idempotency keys. Retrying a banner click cannot invent a second grant.Architecture · 2025-10-22
• Courier state is not order statusShopenup keeps Shiprocket webhook payloads on fulfillments and returns. Internal status alone cannot tell you where the packet is.Debugging · 2025-08-29