Fintech and regulated
Our work, filtered to one sector.
Money moves through a third-party processor's webhooks, which retry and arrive out of order, so you risk double-provisioning and failing to reverse on refund, and auditors need every discrepancy visible. The data is regulated: it can't leave an approved region and secrets can't sit in the build artifact.
How we would approach it
Claim an idempotency ledger keyed on (order, event) atomically before any side effect so a grant can never double-run, revoke on refund by reason code, and when a paid amount doesn't match the expected price still provision but record the discrepancy for reconciliation instead of silently failing a paying customer, plus alert on the silent-failure class where you correctly return 200 to the processor but a downstream step failed and no 5xx exists to catch it. For the data itself: verified TLS with a pinned CA and a startup check that reads the actually-negotiated cipher rather than trusting config, secrets fetched at runtime from a secret manager, and any automated state change gated behind human approval.
- Go
- PostgreSQL
- Cloud Run
- Secret Manager
- Google Cloud
10 published in this sector
2020 to 202410 projects
- 17Sep 2023 to Jun 2024A standard monorepo for second-generation cloud functionsTypeScript · Nx · Cloud Functions
- 18Aug 2022 to May 2024Schema checks and subgraph publication in the delivery pipelineTekton · GraphQL · Node
- 19Jun 2022 to May 2024Self-hosted continuous-integration runners on the clusterGitHub Actions · Kubernetes · Helm
- 20Mar 2022 to May 2024Per-pull-request preview environmentsTekton · Kubernetes · Helm
- 21Feb 2022 to May 2024A continuous-integration platform on Kubernetes-native pipelinesTekton · Knative · Kubernetes
- 22Jan 2021 to May 2024Observability and alerting standardized across the fleetPrometheus · Sumo Logic · Honeycomb
- 23Jul 2020 to Dec 2023Provisioning for managed databases, streaming and the warehouseSpanner · Cloud SQL · Pub/Sub · BigQuery
- 24Jun 2020 to May 2024GitOps delivery for a fleet of production servicesArgoCD · Helm · Kubernetes
- 25Apr 2020 to May 2024Infrastructure as code across a cloud organizationTerraform · Atlantis · Google Cloud
- 26Apr 2020 to Dec 2023A managed Kubernetes platform for product engineeringGKE · Helm · Terraform