Tag
We had already written down how to build this, and then we overturned our own decision. What follows is the architecture that replaced it — including a caching bug we designed out before it could ever leak.