Engineering Deep Dives
Detailed write-ups of real engineering challenges: the problem, the constraints, the trade-offs, and what I shipped.
Building an OIDC-compliant SSO server that plays both sides of the protocol, and why sitting between two trust boundaries is harder than picking one.
How I designed stream-per-domain isolation to prevent tenant cross-contamination in a production AI messaging platform.
Zero-downtime migrations require you to think forward and backward at the same time. Here's the expand-and-contract pattern that got us through it at Grab.