Company
Engineering Principles
Before anything we build goes live, it has to meet a short list of standards. None of them are exciting. All of them are what separates software that works in a demo from software that works on a busy Monday.
The list
Permissions on the server
Users only ever reach data they're allowed to see.
All or nothing
Related changes succeed or fail together. No half-saved orders.
Tests on what matters
Critical paths are tested. A bug gets a test before it gets a fix.
Secrets out of code
Keys and passwords never live in the repository.
Alerts
We hear about failures before users do.
Restores we've tried
Backups are automatic, and we've actually restored from them.
A second pair of eyes
Nothing ships without someone other than the author reviewing it.