Secure Software Design
A Feature Flag Is Not an Authorisation Check
Separate feature rollout from access control so a hidden interface cannot become the only protection around a sensitive server action.
SOFTWARE · SECURITY · DESIGN
application design
Reliable Software
A Retry Button Should Not Create a Second Order
Design retries around one intended operation so a timeout does not become a second order, with clear keys, state checks and provider-specific rules.