Articles for people who
ship the stack
Original rewrites on React, Node.js, TypeScript and AI — practical notes from the same engineering practice behind our operator software. Article bodies are in English.
Tagged: security
Audit SPF DKIM and DMARC from Node.js with prioritized findings
Call a mail-security audit API from Node, handle DKIM selectors correctly, and turn scores into an ordered repair plan.
1080 wordsRead articleThe GraphQL Query That Exhausted the Database Pool
One nested GraphQL document burned out a production database. Why rate limits, HTTP timeouts, and DataLoader failed — and the four bounds that finally contained it.
1617 wordsRead articleEnforcing Agent Rules in Code: PreToolUse, PostToolUse and Stop Hooks
Learn why authorisation for LLM agents belongs in deterministic tool-call hooks, how to deny calls safely, and how to wrap a dispatcher without recursion.
2721 wordsRead articleGate Agent Actions by Effect, Not by Verb: Lessons From a Five-Agent Swarm
How a small multi-agent setup routed around a keyword-based approval gate, what the agents built on their own, and why permissions must describe effects, not words.
3284 wordsRead articleSandboxing node_modules with the Node.js Permission Model Flags
Learn how the Node.js --permission flag denies filesystem, network and process access by default, how to grant it precisely, and where its limits lie.
2794 wordsRead articleHardening a TypeScript MCP Server for Real Network Traffic
How to take an MCP server from stdio to Streamable HTTP with per-session isolation, OAuth bearer auth, rate limits, error boundaries and injection defenses.
4874 wordsRead articleNext.js 16 Upgrade Traps: Parallel Route Defaults and middleware to proxy
Learn why Next.js 16 parallel route slots need a default.js, how to review a middleware.ts to proxy.ts move safely, and what to test before calling the upgrade done.
1342 wordsRead articleMapping the Auth Vocabulary: API Keys, Sessions, JWT, OAuth2, OIDC, SSO
Learn how API keys, sessions, JWTs, OAuth2, OpenID Connect and SSO fit together by sorting each one under a single question: who is calling, or what may they do.
2323 wordsRead articleDesigning the Agent Harness: Policy, Sandboxing, Memory and Verification
Learn which runtime layers turn a tool-calling LLM into a dependable agent: execution policy, OS sandboxing, persistent state, verification, context control and cost.
4372 wordsRead article
About these articles
Request a 24h estimate
Need the same stack in a production operator layer? Send the brief — estimate within 24 hours.