Writing

Engineering stories from production. Bugs that took days to find, architecture decisions that paid off, and systems that taught me something I didn't expect.

securityapibackendauth

The OTP We Were Never Actually Checking

We had OTP verification in the app. The backend never saw it. Any client could skip it entirely.

August 18, 20255 min read

fastapisecurityproductiondebugging

Swagger Was Live in Production and the Code Looked Fine

A missing key in config.ini. A default that wasn't wrong. And a method that didn't do what we thought it did.

February 15, 20266 min read

debuggingproductionauthbackend

The Bug I Couldn't Reproduce

One user. One Apple ID. userId returning 0 in production. Here's how I found it without being able to trigger it myself.

December 4, 20256 min read

goarchitecturebackendproduction

Why Status Is a Function, Not a Column

How I built a UAE document compliance engine for 178+ employees — and why storing computed state would have made it worse.

September 15, 20258 min read

flutteriosandroiddistributed-systemsdebugging

The Background Sync That Fought the Operating System

How we built a dual-platform health data pipeline for Vaidya AI — and what the OS taught us about assumptions.

April 10, 202612 min read