Standing up a download vault on Cloud Run

The bert.bits download store is built on a delivery service that does one thing well: it keeps private files in a vault and hands out expiring, budgeted download links. It deliberately does not take payments, send email or dispatch webhooks.

So the store needs a small second service — the Counter — between Stripe Checkout and the vault. Stripe verifies the payment; the Counter maps the order line to a published release, mints a grant and a link, emails the buyer from orders@bertbits.com, and polls the vault’s event stream so support can see what was downloaded. Nothing is ever entitled because a browser reached a success URL.

This post is a placeholder for the write-up of the pilot.