Research
API authorization: enforce the object boundary
Threat-model object-level authorization across REST endpoints, multi-tenant queries, async jobs and privileged workflows.
Read or tryEngineering learning path
Platform & release integrity
Build provenance, CI/CD authority, Cloudflare routing, operational visibility and rollback.
The boundary to understand
Can the team prove the reviewed artifact is what actually reached production?
- Separate untrusted builds from deploy authority
- Verify canonical routes against the actual edge runtime
- Define rollback conditions and evidence before release
Research and examples
Research
Release integrity: a green build is not a trustworthy release
Connect source review, artifact provenance, signing, deployment identity, rollout controls and rollback validation.
Read or tryResearch
Cloudflare Worker redirect loop: an annotated production incident
First-party analysis of a Cloudflare Worker static-asset redirect loop, its narrow fix, canonical route checks and release regression evidence.
Read or tryCase study
Repairing a Cloudflare Worker canonical-URL redirect loop
A production site stopped serving pages because asset requests for .html files bounced back to their clean canonical paths.
Read or tryCase study
SiteGuard Monitor: service-health and alerting demonstrator
We implemented Python/SQLite probes, durable health observations and a status view, then exercised the alert states with synthetic failure sequences.
Read or tryJeffrey Monica founded Demonic Binary. Explore his engineering background or the original company research behind these topic collections.