Engineering · May 11, 2026 · Gynvix · 1 min read
What belongs in the Node process
The API process should own validation, authorization, and the database. The page should not.
One writer
If both the website and a script update the same table with different rules, the rules will diverge. Put the write behind the API.
Background work
A request that sends mail or rebuilds an index should enqueue the job. The HTTP call returns when the record is saved.
Configuration
Read secrets from the environment at startup. Do not import them into the client bundle.