Journal · Writing

Ideas worth shipping.

Engineering, design, security, and product thinking from the team. Written for the people doing the work — not a content calendar.

Articles published in 2026

Topics: engineering, design, security, performance

7min

Average reading time

AllEngineeringDesignSecurityPerformance

app/api/telemetry/route.ts

import { NextRequest } from "next/server"

export const runtime = "edge"

export async function GET(req: NextRequest) {

const data = await fetchTelemetry(req)

return Response.json(data)

}

Featured

Engineering·8 min read

Why the Next.js App Router is the right foundation for every SaaS in 2026

Server Components, streaming, and edge runtimes have matured. Here's how we structure every new engagement.

10 May 2026

audit / hardening-report.md

Reflected XSS · /search

Fixed

Missing CSP · /admin

Fixed

Stale dep · lodash 4.17

Patched

MFA recommended · service accts

Done

SecurityTrending

6 min read·Apr 2026

How to write a penetration testing report your engineering team will actually read

Most pen-test reports are 200 pages of CVSS scores nobody acts on. Here's the format we use instead.

The anatomy of a checkout that converts at 3%+

We've shipped 14 e-commerce checkouts. These are the 7 design decisions that move the needle every time.

Design tokens that actually scale: lessons from five design system builds

Token architecture is not a Figma problem. It's an engineering problem. Here's how we solve it.

Core Web Vitals in 2026: what changed and what it means for your stack

INP replaced FID. Interaction budgets are tighter. Here's how we keep every Next.js platform at 98+.

Read article

audit / hardening-report.md

Reflected XSS · /search

Fixed

Missing CSP · /admin

Fixed

Stale dep · lodash 4.17

Patched

MFA recommended · service accts

Done

Security

12 min read·Jan 2026

Threat modeling for early-stage startups: a pragmatic framework

You don't need a security team to do threat modeling. You need one afternoon and this template.

Read article

Newsletter

New pieces, when they're ready.

No content calendar. No newsletter that ships because Thursday is newsletter day. We send when we have something worth reading.