The browser should not hold the keys
How this site works: one Rust binary serving the pages, argon2 sessions in httpOnly cookies, double-submit CSRF, and markdown sanitised before it is stored.
Engineering notes
Architecture decisions, security tradeoffs, and the practices that keep a product honest. Written while shipping, not after.
How this site works: one Rust binary serving the pages, argon2 sessions in httpOnly cookies, double-submit CSRF, and markdown sanitised before it is stored.
A practical way to keep Flutter screens honest: one source of truth, sealed UI state, and tests that describe behaviour instead of widgets.
Why an on-device image classifier beats a cloud round trip for a farmer in a low-signal area — and the export pipeline that makes it small enough to ship.