· Elevia
Row-level trust in practice: what RLS gets you that ACLs don't
Object-level ACLs decide who can call an endpoint. RLS decides which rows the endpoint is allowed to touch. Here's why that matters for regulated data.
ReadSkip to main content
Blog
The Altitude Report
Working notes on process mining, workforce intelligence, and governance.
· The FH team
Hash chains, WORM anchors, and the audit auditors actually accept
Chain-of-custody is not a signed CSV export. Here's the append-only pattern we ship and why the anchor step is non-negotiable.
Read · The FH team
Enforcing four-eyes SoD inside Postgres — not the app
Application-side four-eyes is a suggestion. Database-side four-eyes is a guarantee. A walk-through of the trigger we use.
Read · Design
Onyx: what building a dual-theme design system took
How we shipped Onyx Light and Onyx Dark with zero flash, matched contrast, and one accent that survives both themes.
ReadFull-length posts drop in Sprint 15. Subscribe to the Altitude Report to get them in your inbox.