Insights

Notes from inside the build.

Architecture decisions, post-mortems and the trade-offs we actually made — written by the engineers who made them.

Zero-trust on a live estate

Hardening, identity and supply-chain controls on systems that cannot be taken offline to be fixed.

If the vendor API is the risk, we build the eval harness first and the feature second.

The system that pays the bills cannot be switched off to be fixed. We move traffic one route at a time.

How we keep availability honest: a budget that blocks deploys, not a dashboard that gets ignored.