Why we run FORCE row-level security on every tenant-scoped table
What it took to flip Postgres FORCE RLS on across 23 tables without breaking sign-in, the SECURITY DEFINER pattern that unblocked the users table, and the migration playbook anyone running multi-tenant Postgres should steal.
Engineering & product notes from the Terrabog team
Why most retail forecasts are wrong (and the macroeconomic signal we ship by default)
Demand forecasting that ignores inflation, currency, and consumer sentiment is forecasting last quarter's customer. How Terrabog wires FRED, Census, and seasonal data into every prediction — without you doing the work.
Engineering & product notes from the Terrabog team
Phishing-resistant MFA, plain English: what passkeys do that TOTP can't
TOTP codes can be phished in real time. Passkeys can't — the browser cryptographically refuses to use them on any origin other than yours. How we shipped FIDO2 / WebAuthn into Terrabog and why it matters even if your customers are non-technical.
Engineering & product notes from the Terrabog team