Notes from the build

Things I write down while shipping.

Short technical notes from the products on this site.

• Holding a seat without confirming itOn the library management platform, an unpaid booking still occupies inventory. Confirm has to re-check that hold, and a QR scan cannot check someone in twice.PostgreSQL · 2026-07-12
• Three Next.js apps, one privacy boundaryThe DPDPA platform splits marketing, dashboard, and Privacy Centre so crawlable pages and principal data never share a robots policy.Next.js · 2026-05-20
• Four Node processes behind IISDPDPA platform deploy docs put ARR in front of four local ports and run the apps as Windows services. Mail that cannot send is skipped, not faked.Deployment · 2026-04-08
• Don't scan the whole database to classify PIIDPDPA platform discovery samples stores in chunks, retries, then pauses. Simulated connectors stay labelled so they cannot pass as verification.Performance · 2026-03-18
• The server clock is not the user's dayThe daily care platform stores UTC and IANA timezones, then computes check-ins and reminder windows in the user timezone. Cron jobs take a Postgres advisory lock.Node.js · 2026-02-04
• COD is not a payment statusThe e-commerce platform treats cash on delivery as an advance plus remaining cash, then waits for merchant accept before a courier label exists.APIs · 2025-12-11
• Consent as a hash chainDPDPA platform consent is a ledger with tenant-scoped idempotency keys. Retrying a banner click cannot invent a second grant.Architecture · 2025-10-22
• Courier state is not order statusThe e-commerce platform keeps Shiprocket webhook payloads on fulfillments and returns. Internal status alone cannot tell you where the packet is.Debugging · 2025-08-29