Compliance Engineering ยท Faiz Ahmed FarooquiPosts in the Compliance Engineering series.https://faizahmed.in/Three Error Shapes, One API: Adopting RFC 9457 Problem Detailshttps://faizahmed.in/rfc-9457-problem-details-api-errors/https://faizahmed.in/rfc-9457-problem-details-api-errors/Fri, 21 Aug 2026 07:30:00 GMTapirestnestjsnodejshttpKey Rotation Without Downtime: Never Generate a Key in a Migrationhttps://faizahmed.in/jwt-key-rotation-without-downtime/https://faizahmed.in/jwt-key-rotation-without-downtime/Fri, 21 Aug 2026 04:00:00 GMTpostgresqlkey-managementjwkssecuritynodejsAppend-Only Audit Logs in Postgres: Your Trigger Misses TRUNCATEhttps://faizahmed.in/append-only-audit-log-postgres-hash-chain/https://faizahmed.in/append-only-audit-log-postgres-hash-chain/Thu, 20 Aug 2026 10:00:00 GMTpostgresqlaudit-logsecuritycompliancenodejsNested JWTs in Node.js: Decrypting a Token Is Not Verifying Ithttps://faizahmed.in/nested-jwts-nodejs-decrypt-is-not-verify/https://faizahmed.in/nested-jwts-nodejs-decrypt-is-not-verify/Tue, 11 Aug 2026 09:30:00 GMTjwtjwejosenodejsnestjssecurity