August 2026 – Tech Update
A public API, and the bugs we found auditing ourselves This month the API that’s been running internally for months went into testing with a real public surface: keys, scopes, signed webhooks, metered billing. Building it forced us to look hard at our own product, and that look turned up a cluster of real security […]