Skip to content
All Humans
Filters:
Authored Handbook Entries
engineering
Record your architectural decisions

We write Architecture Decision Records (ADRs) to capture the reasons behind our technical choices while they are fresh.

Read doc
engineering
How we review code

We review code to verify logic, catch edge cases, and prevent latency spikes, leaving formatting to compilers.

Read doc
engineering
Treat migrations like surgery

We write, test, and execute database migrations under strict controls to prevent data loss and downtime.

Read doc
engineering
Every dependency is a liability

We evaluate, add, and remove third-party packages to keep our dependency graph small and maintainable.

Read doc
engineering
Build software that lasts

This closing chapter checks whether we have internalized our operational values.

Read doc
engineering
How we handle incidents

We prioritize system stabilization over root-cause debugging during production outages.

Read doc
engineering
Your laptop should mirror production

We maintain local environments that match production to prevent configuration drift.

Read doc
engineering
Instrument your code before you ship it

We set up logging, error tracking, and metrics dashboards for every service before it handles production traffic.

Read doc
engineering
The on-call rotation

We assign clear ownership of production systems to resolve incidents quickly and distribute the operational burden.

Read doc
engineering
We build things that work

This handbook outlines the practices and operational standards we use to build correct, stable software.

Read doc
engineering
Ship small, isolated changes

We deploy code in small increments to reduce risk and maintain speed.

Read doc
engineering
Test what breaks

We prioritize integration tests over unit tests and eliminate flaky tests within 24 hours.

Read doc
security
Access Control

How we grant, scope, and revoke access to our systems.

Read doc
security
Data Handling

How we collect, store, access, and delete client data securely.

Read doc
security
The core security question

Why security is about judgment, not compliance.

Read doc
security
Security is the floor

Why we treat security as a baseline condition, not an optional layer.

Read doc
security
Secret Management

How we store secrets, who can see them, and how we handle leaks.

Read doc
security
Third-Party Audits

How we evaluate and monitor the external dependencies and vendors we bring into projects.

Read doc
security
Vulnerability Disclosure

How we receive, fix, and communicate security vulnerability reports.

Read doc