Research
Play Integrity: bind verdicts to backend actions
A practical Android integrity design covering request hashes, server verification, risk tiers and attacker-controlled client signals.
Read or tryEngineering learning path
Android, Kotlin & Play Integrity
Android integrity verdict policy, authenticated API contracts and lifecycle-aware recovery.
The boundary to understand
Which decisions can the Android client suggest, and which must the server enforce?
- Bind Play Integrity verdicts to an exact action
- Enforce permissions on the backend regardless of device verdict
- Validate concurrency, retries and revoked sessions
Research and examples
Research
API authorization: enforce the object boundary
Threat-model object-level authorization across REST endpoints, multi-tenant queries, async jobs and privileged workflows.
Read or tryResearch
Session security is a server-side lifecycle problem
Access tokens, refresh rotation, revocation, concurrent clients and recovery paths viewed as one state machine.
Read or tryCase study
Mobile and backend workflows across multiple operational sites
A founder-led engineering account of authenticated mobile/API workflows and offline recovery across multiple operating sites.
Read or tryJeffrey Monica founded Demonic Binary. Explore his engineering background or the original company research behind these topic collections.