A running log of shipped features across my projects. What I built, the one decision that mattered, and the honest good / bad / ugly.
Hand-picked palettes fail accessibility quietly. Derived ones do not. The gap measured 18 of 22 against 22 of 22.
Production had been hashing board secrets with a development constant. The one-line fix would have locked out every deployed board.
Middleware protected the pages. Every API route was trusted to protect itself. Two of them did not.
Families signing up for a kids app were shown a finance product's name by Google. A second OAuth client in the same project does not fix that.
Prisma takes an advisory lock before migrating. Run that through a connection pooler and a failed migration can leave the lock held by a session nobody can reach.
Four UI tiers from one component library. Zero per-age forks. CSS tokens drive everything.
Webhook plus cron as safety net. Zero double-counts. Two sources of truth that agree.