<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Pontelon — Insights</title>
    <link>https://pontelon.com/insights</link>
    <atom:link href="https://pontelon.com/rss.xml" rel="self" type="application/rss+xml" />
    <description>Pontelon builds secure, scalable software and AI systems, and trains teams to run them. Engineering, consulting and training in security, AI, cloud and DevOps.</description>
    <language>en-us</language>
    <copyright>© 2026 Pontelon LLC</copyright>
    <lastBuildDate>Fri, 11 Sep 2026 00:00:00 GMT</lastBuildDate>
    <item>
      <title>Granting access should be harder than revoking it</title>
      <link>https://pontelon.com/insights/two-locks</link>
      <guid isPermaLink="true">https://pontelon.com/insights/two-locks</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:00 GMT</pubDate>
      <description>Most permission systems make adding and removing a user mirror images of each other. They should not be. A note on asymmetry, written while adding roles to our own admin panel.</description>
      <category>security</category>
      <category>authorization</category>
      <category>architecture</category>
    </item>
    <item>
      <title>Why this site has no login form</title>
      <link>https://pontelon.com/insights/no-login-form</link>
      <guid isPermaLink="true">https://pontelon.com/insights/no-login-form</guid>
      <pubDate>Fri, 14 Aug 2026 00:00:00 GMT</pubDate>
      <description>The admin panel behind pontelon.com stores no passwords, no password hashes and no sessions of its own. Here is what that buys, and what it costs.</description>
      <category>security</category>
      <category>authentication</category>
      <category>architecture</category>
    </item>
    <item>
      <title>An audit log with a delete button is a diary</title>
      <link>https://pontelon.com/insights/audit-log-with-no-delete</link>
      <guid isPermaLink="true">https://pontelon.com/insights/audit-log-with-no-delete</guid>
      <pubDate>Thu, 02 Jul 2026 00:00:00 GMT</pubDate>
      <description>Append-only is not a database feature you enable. It is a property you have to refuse to break, in every layer, every time somebody asks.</description>
      <category>security</category>
      <category>observability</category>
      <category>architecture</category>
    </item>
  </channel>
</rss>
