compliance-engineering
Three Error Shapes, One API: Adopting RFC 9457 Problem Details
--- Fourth post from the compliance-ready backend kit, after nested JWTs, append-only audit logs and key rotation. Before I fixed…
Compliance Engineering
4 posts RSS
compliance-engineering
Key Rotation Without Downtime: Never Generate a Key in a Migration
--- Third post from the compliance-ready backend kit, after nested JWTs and append-only audit logs. Key rotation is the control ev…
compliance-engineering
Append-Only Audit Logs in Postgres: Your Trigger Misses TRUNCATE
--- Second post from the compliance-ready backend kit, after nested JWTs. This one is about the audit log, which is the control an…
compliance-engineering
Nested JWTs in Node.js: Decrypting a Token Is Not Verifying It
--- I have been building a compliance-ready backend kit: a NestJS and TypeScript monorepo where every capability maps to a named c…