Skip to content
部落格

洞察與動態

關於合規、平台架構,以及大規模經營金流服務的筆記。

Architecture 2026年6月14日

One platform, many storefronts: multi-tenancy by department

A money-services operator is rarely a single shop. Here is how MEXAR uses the department as its tenancy boundary so branches, brands, and franchisees run isolated — yet roll up into one view.

閱讀文章
Compliance 2026年6月14日

Access control your auditor will recognise

Regulators ask who can do what, and how you can prove it. Here is how MEXAR structures role-based access control so segregation of duties is fine-grained, least-privilege, and reviewable in version control.

閱讀文章
Engineering 2026年6月14日

Extending MEXAR without forking: the plugin system

Customization should not mean a fork you can never upgrade. Here is how MEXAR plugins add routes, controllers, and migrations as self-contained packages that live outside the core.

閱讀文章
Compliance 2026年6月13日

Compliance that scales: KYC routing and the auto-screening pipeline

Compliance cannot be a manual bottleneck. Here is how MEXAR routes KYC by document type and runs a configurable, pluggable reviewer pipeline on every transaction.

閱讀文章
Engineering 2026年6月12日

Inventory and pricing for a money changer: stock, cost and rates

A currency-exchange business is really an inventory business. Here is how MEXAR models accounts and balances, tracks cost with a moving average, and separates the six rate types that drive a transaction.

閱讀文章
Architecture 2026年6月11日

Event-driven by design: the queue pipeline under MEXAR

How MEXAR keeps transactions fast and side-effects reliable — events broadcast state changes, idempotent listeners run on queue workers, and webhooks are deduplicated end to end.

閱讀文章
Engineering 2026年6月9日

An audit-ready ledger: how MEXAR keeps money records immutable

In a regulated money business, records have to be provable after the fact. Here is how MEXAR versions transaction items and account flows so history can never be silently rewritten.

閱讀文章
Architecture 2026年6月2日

Why every module is swappable by contract

Pay-in, payout, KYC, messaging — each sits behind a stable internal contract. Here is why that design matters for operators who run on MEXAR.

閱讀文章
Security 2026年5月20日

What passing an independent penetration test means for you

An external security team probed MEXAR end to end. Here is what we tested, what we found, and why it matters for your money.

閱讀文章