The finding came from an audit. Not from a production breach. Not from an intrusion detection alert. Not from a customer complaint. An auditor was reviewing a payment workflow and asked a simple question: “What prevents one authorized user from…
In the architecture of card payments, there is a hard, physical boundary that does not exist in almost any other domain of distributed systems. When a customer dips a card at a merchant terminal, the Visa or Mastercard network initiates…
The requirement sounded simple. We needed to add a new column to a production table. The table had more than a billion rows. The business couldn’t afford hours of downtime. And we couldn’t simply stop the application, modify the database,…
A practitioner’s notes on financial infrastructure A coffee shop in Tokyo (Merchant) accepts a Visa card issued by a small credit union in Ohio (Issuer). They share no database, no API contract, and no direct network path. The Cardholder taps…
A single-region deployment is a single point of failure. If an entire data center burns down, the ledger stops. Furthermore, if your users are in Tokyo and your database is in Frankfurt, the speed of light imposes a hard, unbreakable…
It was 2AM. Most of the engineering team was asleep. The payment system was processing transactions normally. Then an alert fired. Duplicate charges were increasing. Not thousands. Not enough to immediately bring the entire system down. But enough to tell…
