Writing

Field notes from the layer
no one screenshots.

These are working notes on the decisions behind the infrastructure I build. I care more about why I made a call than the exact syntax, so there's no code here. I draw the mechanisms instead. Two posts to start. I'll add more when I've got something worth explaining.

Why I split Nura’s background jobs across two queues

One queue is the obvious way to start, and it works right up until one kind of job jams and takes everything else down with it. Splitting them later is a lot more painful than splitting them early.

The trade-off You take on more moving parts and a recovery pass to babysit. In return, a failure stays where it happened.

session-analysis · insight-generation

Rotating refresh tokens, and the day one shows up twice

Most people rotate refresh tokens for basic hygiene. It turned out to be more useful than that. Once a token dies the moment it’s used, a token that shows up twice is telling you something, and you can act on it.

The trade-off Now and then you’ll log out a real user who did nothing wrong. That’s the price for making sure a stolen session can never quietly hang around.

JWT access · rotating refresh · Redis blacklist


This is more of a running journal than a publishing schedule. I write one up when a decision was interesting enough to be worth making, and worth explaining afterward.