Blog

Blog

Engineering notes from the Dekkode team: what we build, what broke, and what we learned along the way.

All posts

php security symfony

Envelope Encryption in Symfony 8.2: Lock the Key, Not Just the Data

Symfony 8.2 encrypts a Doctrine column with one attribute. The trick behind it is called envelope encryption: lock the data with one key, and lock that key with a second one that never leaves your key service. Here's how it works, with a playground to try it.

ai decision-models

Decision Models: Who Launched What, and What to Ask

Jev, Clef, Strands Decider, OpenAI’s Decisions API, Microsoft-Decision-1: decision models went from one product to dozens in less than a month. Here is who launched what, the three approaches behind them, and the questions worth asking before you pick one.

Sudo mode in Symfony 8.2: ask for the password again, but only when it matters

You know that moment on GitHub when you want to delete a repository and it stops you: "Confirm access". Type your password, carry on. That's sudo mode, and Symfony 8.2 ships it natively: two new security attributes, a timestamp on the token and an entry point that sends people to a confirm-password page instead of a 403. Let's build it.

ai decision-models symfony

Decision Models in Symfony AI: Put Confidence to Work

Which team should handle this ticket? Does this tool call need a human review? Decision models turn questions like these into structured answers with probabilities. Let’s connect Jev to Symfony AI and put the threshold where we can test it: in our application code.