Engineering · 2026-05-02 · 5 min
If a permission check lives in a component, it is a suggestion rather than a rule.
Hiding a button is not access control. It is a courtesy to the user and nothing more.
Every check that matters should be enforced where the data is read and written, so that a new endpoint or a forgotten condition cannot bypass it.
This costs more early and less forever. It is one of the few architectural decisions we make the same way on almost every project.
More notes
Software
A foundation is not a template. The difference is whether the data model can change.
Product Design
Japanese and English do not occupy the same space. Designing for both first is cheaper than retrofitting either.
Studio Notes
Small is not a stage we are trying to leave. It is how the work stays good.
Tell us what you're trying to build, improve or solve. We'll tell you honestly whether we're the right studio for it.