Public identifiers are ULIDs
Every id that crosses an API boundary is a 26-character ULID string. Never expose the database integer, and never parse an id client-side.
api/**web/**
#ids-are-ulid
This decision as it stands, and the wordings it was recorded with, newest first.
Revisions
A recording keeps no earlier wordings; the one above is the decision as it stands.