
Social features that can't be turned against you
Follows with approval, a feed checked for visibility twice, crews that share exactly three things, coach access you control, age gates, and moderation that never touches your training log.
Page 6 of 7

Follows with approval, a feed checked for visibility twice, crews that share exactly three things, coach access you control, age gates, and moderation that never touches your training log.

RS256 access tokens held only in memory, rotating refresh tokens with reuse detection, CSRF on cookie transport, TOTP with replay protection, and the gaps we have written down rather than hidden.

How the PaceStreak app saves every session to the device first, queues writes in an IndexedDB outbox, and syncs across devices with an idempotent batch endpoint and a sequence cursor.

Logging a habit works the same from the Today row, the week strip and the calendar: a big minus and plus, a few one-tap amounts, and a note.

How PaceStreak's XP, levels, personal records, achievements and leaderboards are built so that two people of very different strength earn exactly the same for the same week.

A daily streak punishes rest. The streak engine counts kept weeks against a target you set, forgives bad weeks with earned freezes and a monthly repair, and stores nothing that can drift.

Designing habits you are trying to break: zero is a clean day, slips are counted honestly, and nothing is ever shown to anyone else.

Why the session cookie uses __Secure- rather than __Host-, why SameSite=Lax is enough, and the rule it forces on the whole domain.

A proxied DNS record with nothing behind it returns 522, which looks like a broken product. So records wait for deployments.

A confident diagnosis that turned out to be a stale local clone 719 commits behind, and the one command that would have prevented it.

A peer-dependency conflict that passed locally on npm 11 and failed in CI on npm 10, and why every check now starts with npm ci.

Without a 404.html, Cloudflare Pages answers every unknown path with the home page and a 200. Here is what that broke.

Shipping 'Write tohello@pacestreak.com' three times, and the build check that finally stopped it.
PaceStreak is a habit and streak tracker for training and everything else worth doing regularly.