Notes on IT leadership, CRM & revenue systems, advertising, and AI automation — by Afrizzal.https://blog.afrizzal.pro/https://blog.afrizzal.pro/blog/a-validation-error-that-was-actually-a-rendering-race/https://blog.afrizzal.pro/blog/a-validation-error-that-was-actually-a-rendering-race/AIDA's Settings AI Features form blocked Save with a "Select a model" error right after switching providers. The real defect sat two React commits away, inside a hidden native select Radix uses to bridge into native form submission — and it never raised an error of its own.Fri, 17 Jul 2026 00:00:00 GMTSystems & Performancereliabilitytestingarchitecturetypescripthttps://blog.afrizzal.pro/blog/the-save-that-refuses-to-fail-with-its-side-effect/https://blog.afrizzal.pro/blog/the-save-that-refuses-to-fail-with-its-side-effect/A Google Reviews listing-confirm route taught me that 'it saved' and 'everything it triggered afterward also worked' are two different claims, and a response body should never merge them into one.Thu, 16 Jul 2026 00:00:00 GMTSystems & Performancereliabilityarchitecturenextjshttps://blog.afrizzal.pro/blog/a-404-that-lies-on-purpose/https://blog.afrizzal.pro/blog/a-404-that-lies-on-purpose/Fixing a cross-tenant IDOR taught me that 'access denied' and 'does not exist' are the same message when the requester should never learn which one is true.Wed, 15 Jul 2026 00:00:00 GMTSystems & Performancesecurityreliabilityarchitecturedata-integrityhttps://blog.afrizzal.pro/blog/race-proof-fifo-stock-ledger-postgres/https://blog.afrizzal.pro/blog/race-proof-fifo-stock-ledger-postgres/Two POS terminals sell the last unit in the same second. Inventory survives that only if every stock mutation goes through one function, one advisory lock, and one idempotency key — and if sub-cent rounding residue dies the moment stock hits zero.Thu, 09 Jul 2026 00:00:00 GMTSystems & Performancepostgresconcurrencydata-integrityarchitecturehttps://blog.afrizzal.pro/blog/support-ticket-tried-to-close-its-own-prompt/https://blog.afrizzal.pro/blog/support-ticket-tried-to-close-its-own-prompt/AIDA classifies support tickets with an LLM, so the classifier has to treat every ticket as a potential attack. The fence around the ticket text is real, but it isn't the guarantee — the guarantee is that a successful attack still can't do anything.Wed, 08 Jul 2026 00:00:00 GMTAI & Automationaillmsecurityreliabilityhttps://blog.afrizzal.pro/blog/retry-that-would-have-referenced-itself/https://blog.afrizzal.pro/blog/retry-that-would-have-referenced-itself/AIDA's outbound email job derives References and In-Reply-To by querying every prior email-bearing message on the ticket. On a retry, the message being sent already has its own Message-ID persisted from the failed first attempt — without an explicit exclusion, it would show up in its own References chain.Tue, 07 Jul 2026 00:00:00 GMTSystems & Performancereliabilityqueuesemailarchitecturehttps://blog.afrizzal.pro/blog/omnisync-http-202-is-a-promise/https://blog.afrizzal.pro/blog/omnisync-http-202-is-a-promise/Every webhook integration works in the demo. Production loses events in the silence after you reply 200 — so I built OmniSync around one guarantee: once an event is acknowledged, it is never silently lost. At-least-once delivery, idempotent everything.Mon, 06 Jul 2026 00:00:00 GMTSystems & Performancearchitecturereliabilityqueuespostgreshttps://blog.afrizzal.pro/blog/upload-limit-that-wasnt-in-my-code/https://blog.afrizzal.pro/blog/upload-limit-that-wasnt-in-my-code/AIDA's public intake route checks content length, per-file size, a running total, and byte-sniffed MIME type before saving an attachment. None of that mattered once Next.js's own proxy layer silently truncated the request body first, with no error back to the client.Mon, 06 Jul 2026 00:00:00 GMTSystems & Performancenextjsreliabilityarchitecturehttps://blog.afrizzal.pro/blog/e2e-suite-caught-wrong-ai-diagnosis/https://blog.afrizzal.pro/blog/e2e-suite-caught-wrong-ai-diagnosis/An AI agent blamed a failing Playwright test on Next.js response caching. I traced the code and blamed middleware. We were both wrong about the observation: the test's "anonymous" context was quietly authenticated. Two stacked bugs, two confident stories, and the re-run as the only reviewer that counted.Sun, 05 Jul 2026 00:00:00 GMTAI & Automationaitestingnextjsreliabilityhttps://blog.afrizzal.pro/blog/hello-world/https://blog.afrizzal.pro/blog/hello-world/Why I started this blog, what I plan to write about, and a quick tour of the formatting it supports.Thu, 18 Jun 2026 00:00:00 GMTNotesmetacareerhttps://blog.afrizzal.pro/blog/lean-systems-modest-hardware/https://blog.afrizzal.pro/blog/lean-systems-modest-hardware/Your scale ceiling is an arithmetic result, not a feeling — throughput is concurrency over latency, and a CPU-bound box tops out at cores divided by CPU-seconds per request. Most systems fall over at a small fraction of that number because of coordination and copies, not because the machine is small.Mon, 15 Jun 2026 00:00:00 GMTSystems & Performancearchitectureperformancescalinghttps://blog.afrizzal.pro/blog/crm-plumbing-revenue/https://blog.afrizzal.pro/blog/crm-plumbing-revenue/A CRM is only as good as the data flowing into it. The interesting work is rarely the UI — it is the plumbing.Fri, 12 Jun 2026 00:00:00 GMTCRM & Revenuecrmrevenuehttps://blog.afrizzal.pro/blog/practical-ai-automation/https://blog.afrizzal.pro/blog/practical-ai-automation/A model call is the slowest, priciest, least deterministic dependency in your whole system, so you ration it like an unreliable third-party API you call as rarely as you can. The practical skill is putting the model only where fuzzy understanding is genuinely required and doing the boring 80% with deterministic code you can test.Tue, 09 Jun 2026 00:00:00 GMTAI & Automationaiautomationarchitecturehttps://blog.afrizzal.pro/blog/reading-slow-query-logs/https://blog.afrizzal.pro/blog/reading-slow-query-logs/Before reaching for a bigger server, read the slow query log. It is the cheapest performance win you will ever get.Fri, 05 Jun 2026 00:00:00 GMTSystems & Performancedatabaseperformancehttps://blog.afrizzal.pro/blog/spreadsheets-to-dashboards/https://blog.afrizzal.pro/blog/spreadsheets-to-dashboards/A spreadsheet quietly running part of the business is a production system with real users and a proven spec. You earn the right to replace it by matching its numbers exactly — bugs included — before you change a single thing.Mon, 01 Jun 2026 00:00:00 GMTCRM & Revenueanalyticsdata-modelingcrm