How we secured inter-service communication with HMAC-SHA256 signed tokens that expire in 10 seconds — no session state, no API keys to rotate, no middleware databases to query.
How replacing API response proxying with 307 redirects to signed CDN URLs eliminated origin bandwidth costs and removed an entire class of streaming bugs.