01 — Context
A media company launched a subscription anime streaming service for a local-language audience on iOS and Android. The platform includes a mobile app, an API backend, a payment service and scheduled jobs, alongside an external content backend and a billing service.
02 — Challenge
The service needed secure accounts, reliable subscription activation across several billing systems, and smooth playback with progress sync. A strict production-readiness bar was required before staging tests.
03 — Approach
Every change starts as a spec
A cross-platform mobile app (React Native) with layered architecture. Every behaviour change starts as a written spec, and a tooling hook blocks edits that have no approved change behind them.
A backend built for secure accounts
A Go backend with about 20 feature areas (catalogue, streaming, watch history, watchlist, ratings and comments, recommendations, downloads, push notifications, deep links), short-lived signed access tokens and hashed refresh tokens.
Payments kept apart
A separate payment service handles bank and wallet gateways, with message-queue callbacks and PII-scrubbed logs. The backend acts as a pure proxy, so the app never talks to billing directly.
Audited before every release
Multi-agent production audits, with independent re-verification of every serious finding, run before each release gate.
04 — Outcome
The latest audit found the platform ready for staging tests with no critical findings, and the two confirmed high-severity issues were queued for fixing first.