StackShortlist

100 new companies running the technology you sell to, each with a founder or admin work email. $19 a list.

Norway Joined on Aug 21, 2026 https://stackshortlist.dev

StackShortlist

Oct 8

Month-end reconciliation for a Stripe Connect platform: a complete walkthrough

#feeguard #monthend #reconciliation #for

12 min read

Want to connect with StackShortlist?

Create an account to connect with StackShortlist. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

StackShortlist

Oct 8

Writing your first policy set: one schema, end to end

#vibeguard #writing #your #first

9 min read

StackShortlist

Oct 5

Stripe's own tools for fee visibility, and their limits

#feeguard #stripes #own #tools

11 min read

StackShortlist

Sep 28

The complete anatomy of a Stripe Connect refund

#feeguard #the #complete #anatomy

12 min read

StackShortlist

Sep 28

GRANTs versus RLS: two permission systems, one database

#vibeguard #grants #versus #rls

9 min read

StackShortlist

Sep 25

From weekend prototype to production: hardening a Supabase app

#vibeguard #from #weekend #prototype

10 min read

StackShortlist

Sep 24

A taxonomy of platform fee leakage

#feeguard #a #taxonomy #of

11 min read

StackShortlist

Sep 24

Migrations that silently weaken policies

#vibeguard #migrations #that #silently

10 min read

StackShortlist

Sep 23

Reading Stripe's ledger like an accountant

#feeguard #reading #stripes #ledger

10 min read

StackShortlist

Sep 11

The tenant-isolation test: five queries that prove your boundaries

#vibeguard #the #tenantisolation #test

9 min read

StackShortlist

Sep 9

Auditing a Supabase project in one afternoon

#vibeguard #auditing #a #supabase

9 min read

StackShortlist

Sep 8

Supabase RLS: A 200 Response Does Not Prove Data Exposure

#supabase

1 min read

StackShortlist

Sep 1

RLS policies do not fail. They drift.

#supabase #rls

4 min read

StackShortlist

Sep 1

How to audit 90 days of platform refunds by hand

#feeguard #audit #90 #days

10 min read

StackShortlist

Aug 31

Build your own fee-leakage detection with the Stripe API

#feeguard #build #your #own

11 min read

StackShortlist

Aug 28

Your NEXT_PUBLIC secret is already in the browser bundle

#keydrift #nextjs #environment #variable

3 min read

StackShortlist

Aug 28

Your Supabase Storage bucket is public - signed URLs will not save you

#vibeguard #nextjs

3 min read

StackShortlist

Aug 28

Stripe Connect refunds: the two flags that silently cost platforms

#feeguard #stripe #connect #refund

4 min read

StackShortlist

Aug 21

What a lost dispute actually costs a Connect platform

#stripe #payments #fintech #api

3 min read

StackShortlist

Aug 21

The Stripe Connect refund that only costs the platform

#stripe #payments #api #webdev

2 min read

StackShortlist

Aug 21

gitignore is not a security control

#security #devops #webdev #javascript

3 min read

StackShortlist

Aug 21

Your RLS policies were correct when you wrote them

#supabase #postgres #security #database

3 min read

StackShortlist

Aug 21

Your .env file is not the problem

#secrets #security #devops

3 min read

StackShortlist

Aug 21

You issued the refund. They kept the money.

#stripeconnect #reconciliation #payments

4 min read

DEV Community

StackShortlist

Badges

Writing Debut

Month-end reconciliation for a Stripe Connect platform: a complete walkthrough

Want to connect with StackShortlist?

Writing your first policy set: one schema, end to end

Stripe's own tools for fee visibility, and their limits

The complete anatomy of a Stripe Connect refund

GRANTs versus RLS: two permission systems, one database

From weekend prototype to production: hardening a Supabase app

A taxonomy of platform fee leakage

Migrations that silently weaken policies

Reading Stripe's ledger like an accountant

The tenant-isolation test: five queries that prove your boundaries

Auditing a Supabase project in one afternoon

Supabase RLS: A 200 Response Does Not Prove Data Exposure

RLS policies do not fail. They drift.

How to audit 90 days of platform refunds by hand

Build your own fee-leakage detection with the Stripe API

Your NEXT_PUBLIC secret is already in the browser bundle

Your Supabase Storage bucket is public - signed URLs will not save you

Stripe Connect refunds: the two flags that silently cost platforms

What a lost dispute actually costs a Connect platform

The Stripe Connect refund that only costs the platform

gitignore is not a security control

Your RLS policies were correct when you wrote them

Your .env file is not the problem

You issued the refund. They kept the money.