

Constructive
1.2K posts

@constructive_io
Your digital construction kit for secure, modular Postgres. Build production apps that last.










Every database has security settings. Default passwords. Encryption. Maybe even RLS enabled. But security settings ≠ secure architecture. Here’s what we mean by secure-by-default Postgres 🧵






Part 1: we had 134 packages across 3 monorepos and zero integration tests. Part 2: we automated the fix. Three GitHub Actions workflows form a state machine to auto-update submodules, run E2E, auto-merge if tests pass. One rolling PR. Fire-and-forget cross-repo dispatch. No manual steps on the happy path. The stack pointer only advances when E2E passes. We stopped finding out about failures during demos.