Metering completes: edge reads + MAU billed.
Usage flows from the durable audit pipeline to Stripe meters, idempotently. The two meters on the pricing page are these.
The same standard we hold your config to. Every entry below carries its real commit hash; entries are curated, history isn't.
Usage flows from the durable audit pipeline to Stripe meters, idempotently. The two meters on the pricing page are these.
Read-after-write through an identical cached SELECT rejected fresh secrets. Found in a live browser, like every good deployed-only bug.
WebCrypto's key_ops metadata made workerd (correctly, strictly) refuse our verification JWK. Node was lenient; production was not.
Enterprise stays sales-led on purpose.
Phishing-resistant where the client supports it.
flag(key, fallback) never throws — outages should degrade, not crash.
Read it before you trust it; that's the point.
Two providers, zero dependencies added.
Per-secret DEKs, HKDF workspace KEKs, a delivery plane that cannot decrypt.
Append-only; this changelog's standard, mechanized.
Plus a remote MCP server (Streamable HTTP).
Config moves between environments like a deploy, because it is one.
The dashboard stopped polling.
KV write-through, in-memory L1.
Everything since builds on this.
Day one decision: no phone-home, enforced ever since.
The repo is private during the rebuild — hashes become clickable with the public release.