Move the success boundary behind verified database consistency.
Reliability case study
Ghostwriter
Treat authentication success as a database contract, not a UI event
Registration appeared complete before the expected database state existed, exposing migration drift and an incomplete success boundary.
Focused reliability case study based on the registration incident and the controls added afterward.

Ownership
What I built and why it mattered
Traced the outage through registration and database state, repaired the success boundary, and added migration drift checks, session-family handling, idle timeout, CSP, consistency checks, and automated regression coverage.
Migration drift guard · session-family behavior · database consistency checks
Reliability sequence
A client transition was not a successful registration.
Incomplete success boundary
The interface moved before the database was ready.
Registration looked complete while the required database state was absent after migration drift.
- 01Submit request
- 02Client transition
- 03Missing database state
- 04Later failure
System flow
The working sequence
- 01Registration
- 02Session creation and renewal
- 03Idle timeout
- 04Rewrite workspace
Technical judgment
Decisions that define the architecture
Add a migration drift guard instead of relying on local schema assumptions.
Model sessions as a family and test expiry and idle behavior.
Harden CSP while preserving required application connections.
Evidence ledger
Claims with their boundaries attached
Registration success boundary
Registration success now depends on the required database state rather than the client transition alone.
Ghostwriter reliability notesMigration drift guard
Automated checks detect schema drift before the registration path is treated as healthy.
Ghostwriter reliability notesCurrent limits
What this work does not establish
- This case study covers reliability controls, not model quality.
- No production user or adoption metrics are claimed.
Need a shorter path?