Scroll

Back to work

04/06 · E-commerce

B2B Marketplace

Recycled-plastics commerce with direct purchase and RFQ. Selling to invited customers since 1 September 2026, multi-vendor in production since 15 September.

Live, multi-vendor
marketplace.internal

100%

prices derived server-side

0

client write privileges

04
Role
Sole authorSecurity audit
Stack
Next.js 16Zod v4StripeSPEIPostgreSQL
Launch
September 2026
Status
Live, multi-vendor
  • 100%

    prices derived server-side

  • 0

    client write privileges

About the project

Before launch I audited the marketplace against the live database inside aborted transactions and proved a customer could set their own price. The fix derives every price in the database and revokes client writes.

Checkout supports card via Stripe and bank transfer via SPEI, the Mexican interbank system.