Structured notes from shipping.

Raw DELETE dies at the edge

When the browser’s HTTP method dies at the hosting edge, the delete that worked locally never meets your ACL or your toast.

Continue reading →

Save again, get another person

A later parent upsert does not fill the null you already froze on the child.

Parse stops at the verb

A registered `-c` can still look missing to stdlib `flag`.

The journal balances. The transaction doesn't.

A balanced journal is not necessarily an explained transaction. Leftover cents are invented money unless every cent is named before insert.

A POST is not your event

A 200 on a public webhook URL proves someone POSTed. It does not prove the body is yours — HMAC is the gate; a secret in env is not.

Forty jobs queued, ten credits spent

Enqueue first and charge later looks orderly. Concurrent admissions leave jobs the ledger never paid for.

Some checkboxes cannot be edited later

A wizard that says “cannot be changed later” is a freeze, not a backlog — it will still let you tick every box.

Shipped is not reachable

Green health and a merged branch do not mean the onboarding launch can start — one missing config id fails only the path humans click.

Don’t invent a user at push time

Minting a fake “Cashier” so the foreign key passes orphans every real person’s sales.

The code you typed is not the sync key

A short shop code looks like the identity. Sync may still be aiming at yesterday’s UUID.

Autoincrement dies offline

Two offline writers can mint the same ID. Sync is where the lie becomes visible.

Prefill is not delivery

A click-to-chat URL opens a composer. It does not prove a message left the device — and a Cloud API 200 only proves accept.

Green tests, forty grants, limit ten

A serial suite can bless a quota check that collapses the moment two requests overlap.