How we formally verify our notification engine never sends duplicates
We use TLA+ to prove the design of our notification sender is correct. This post explains why, what we proved, and how it maps to the production code.
Continue readingWe can't find the internet
Attempting to reconnect
Something went wrong!
Hang in there while we get back on track
We use TLA+ to prove the design of our notification sender is correct. This post explains why, what we proved, and how it maps to the production code.
Continue readingOur SMS pipeline re-sent the same notifications repeatedly for 4 hours. Here's what happened, why, and what we shipped to fix it.
Continue readingAfter years of fighting data syncs and vendor limitations, I built a marketing platform that reads your database directly.
Continue reading