https://burgundysoft.io/writing Notes on building software from the Burgundysoft studio. en-us Fri, 28 Aug 2026 03:15:04 GMT https://burgundysoft.io/writing/screening-insurance-applications-with-an-llm-that-never-decides https://burgundysoft.io/writing/screening-insurance-applications-with-an-llm-that-never-decides Sat, 08 Aug 2026 00:00:00 GMT On Insur, every submission passes through an AI screening stage before a human sees it. The model extracts, flags, and summarizes — it never approves or rejects. Here's how that boundary is enforced in the pipeline itself. https://burgundysoft.io/writing/multi-tenant-authorization-without-row-level-security https://burgundysoft.io/writing/multi-tenant-authorization-without-row-level-security Sat, 01 Aug 2026 00:00:00 GMT Postgres RLS is the fashionable answer for tenant isolation. On a B2B insurance platform we kept authorization in the app layer instead — two role tiers, a guard, and one defensive re-check — and here's why that was the right call. https://burgundysoft.io/writing/deploying-rails-with-kamal-and-thruster https://burgundysoft.io/writing/deploying-rails-with-kamal-and-thruster Mon, 27 Jul 2026 00:00:00 GMT Kamal and Thruster put a Rails app on a plain VPS with zero-downtime deploys, automatic TLS, and asset caching — no Kubernetes, no managed platform, no monthly platform bill. How the pieces fit, and what the docs don't tell you.