29 docs tagged with "standards"

Engineering guide for structuring URLs, handling pagination, and versioning all HTTP endpoints across every team.

Engineering guide for session management, JWT, OAuth 2.0, and SAML across all services and third-party integrations.

Engineering guide for selecting, storing, and using country code top-level domains (ccTLDs) for localized routing and web infrastructure.

Engineering guide for storing and using Unicode CLDR underscore-separated locale identifiers in backend libraries, database collations, and ICU-based systems.

Engineering guide for configuring Cross-Origin Resource Sharing safely — explicit origin whitelisting, credential policy, and header configuration across all APIs.

Engineering guide for storing and exchanging country and regional subdivision codes using ISO 3166-1 alpha-2 and ISO 3166-2 across all services and databases.

Engineering guide for validating, masking, and handling Primary Account Numbers (PANs) in compliance with ISO/IEC 7813 and PCI DSS.

Engineering guide for storing and handling monetary values as integers in the smallest currency unit to prevent floating-point precision errors.

Engineering guide defining when to use soft delete versus hard delete, and how to implement each correctly for audit, compliance, and data integrity.

Engineering guide for storing dates in UTC and communicating them using the ISO 8601 standard across all systems.

Engineering guide for pinning dependencies to explicit versions, committing lockfiles, and maintaining a secure software supply chain.

Engineering guide for encrypting data at rest and in transit across all systems using AES-256 and TLS 1.2+.

Engineering guide for returning a unified JSON error payload to clients and preventing internal details from leaking through API responses.

Engineering guide for storing, validating, and normalizing Global Trade Item Numbers (GTINs) and EAN-13 barcodes across all catalog and inventory systems.

Engineering guide for choosing between UUID v7 and auto-incrementing integer IDs in databases and APIs.

Engineering guide for preventing SQL, NoSQL, and command injection through parameterized queries, ORM sanitization, and strict input validation.

Engineering guide for storing and validating language identifiers using the ISO 639-1 two-letter format across all systems.

Engineering guide for storing and validating system locales using the BCP 47 hyphenated language-region format across all formatting and i18n systems.

Engineering guide for identifying cities, ports, and international trade locations using the UN/LOCODE standard across all logistics and global operations data.

Engineering guide for structured logging, log levels, and PII masking across all services.

Engineering guide for defining, validating, and storing media types (MIME types) for file uploads, API responses, and data transit.

Engineering guide for storing, validating, and formatting phone numbers across all systems using the E.164 standard.

Engineering guide for mandatory test coverage thresholds and static analysis checks that must pass before any deployment to production.

Engineering guide for enforcing rate limits on login, payment, and checkout endpoints to prevent brute-force attacks and systemic abuse.

Engineering guide for implementing Role-Based Access Control and the Principle of Least Privilege across all services and APIs.

Engineering guide for storing and accessing credentials, API keys, and sensitive configuration using approved vault managers — never hardcoded in source code.

Engineering guide for storing authentication tokens safely — why LocalStorage is forbidden and how to configure secure HttpOnly cookies correctly.

Full TypeScript coding standards — naming, type system, strict mode, generics, enums, functions, modules, async/error handling, and project structure.

Section outline for TypeScript code conventions — naming, types, strict mode, generics, async patterns, and project structure standards.