Enum, Lookup Table or Check Constraint? Modelling a Fixed Set of Values
A fixed value set can be a Postgres ENUM, a lookup table with a foreign key, or a text column with a CHECK. Compared on the day the set changes, with SQL for each.
Architecture
Privileged Access Management Under NYDFS: Meeting the New Access-Governance Bar
The amended NYDFS Section 500.7 pushes firms from standing admin rights toward least-privilege, just-in-time access. A reference pattern for the architecture and the review evidence a supervisor will ask for.
Why Did Autovacuum Stall and My Table Keep Bloating?
Dead tuples keep climbing even though autovacuum runs. Find the idle transaction, prepared xact or stale replication slot pinning the xmin horizon, and reclaim the space.
Killing Long-Lived Secrets: Dynamic Credentials With Vault
The static database password in your config file is the credential that eventually leaks. Replace it with short-lived credentials minted on demand by Vault and revoked on a lease.
Instant Payments Fraud Controls: Real-Time Risk Without Breaking the 10-Second SLA
Instant means irrevocable, so fraud scoring must run inside the ten-second settlement window. A reference architecture for real-time risk that fits the latency budget.
Multi-Cloud Abstraction Without the Lowest Common Denominator
Portability need not mean surrendering every useful native cloud service. A decision framework for abstracting only the dependencies that matter for exit, using composition layers where they buy real optionality and native services where lock-in is acceptable.
Building a Verification-of-Payee Routing and Verification Mechanism Connection
Meeting the euro-area Verification of Payee obligation means connecting to a routing and verification mechanism, not integrating with every bank. Here is the build.
Verification of Payee at Scale: Architecture for Sub-Five-Second Name Matching
Verification of Payee has to answer inside the instant-payments clock, which makes name matching an architecture problem. A reference design for the matching, caching and directory-lookup path.
Structuring Terraform Modules for Reuse
How to split a flat Terraform config into versioned, composable modules with clear inputs, outputs and boundaries — and how to know when a module is premature abstraction.
Implementing the 3-2-1 Backup Rule Concretely for a Single Server
Turn the 3-2-1 slogan into a working build for one Linux host: a local restic repo, an immutable Backblaze B2 offsite copy with Object Lock, and checks for all three.