Capital Loss Prevention Practices and Technical System

Dewu handles a large volume of product transactions, and any design flaw, system defect, operational error, or security vulnerability can cause direct or indirect financial loss. Capital loss prevention introduces multiple analysis and control measures throughout a project's lifecycle to prevent or contain such losses.

The practice is organized into three main aspects:

1. Mechanism and Process Construction – Assess project financial risk levels at inception, embed technical risk designs (idempotency, distributed consistency, multi‑region active‑active) in architecture, and establish dedicated risk scoring for high‑risk projects. Deploy verification and monitoring (primarily checks, with monitoring as a safety net) and use chaos engineering to validate rules.

2. Personnel Formation – Build three defensive lines (development, quality, SRE) that collaboratively embed loss‑prevention into daily workflows, with each role focusing on its strengths (e.g., SRE on online stability).

3. Multi‑System Defense – Apply real‑time (T+0), near‑real‑time (T+M), and offline (T+H, T+1) verification methods according to business scenarios, using both bypass and main‑path checks.

Risk identification is the first step, performed via manual analysis and later enhanced with intelligent systems. The technical system includes:

T+1/T+H Offline Checks – Implemented with ODPS to compare full‑database snapshots without affecting production.

T+M Near‑Real‑Time Checks – Leverage database binlog for minute‑level verification, especially for consistency risks.

T+0 Real‑Time Checks – Use business instrumentation and synchronous/asynchronous triggers to perform immediate verification, a capability currently being built by SRE.

Loss‑prevention drills (both destructive and non‑destructive) validate rule effectiveness and uncover uncovered risks. Non‑destructive drills clone production data to safely test rule coverage.

In Dewu’s business practice, SRE leads the implementation, focusing on high‑value transaction flows, tool selection, rule deployment, monitoring alerts, emergency response, automated inspections, and continuous rule freshness. Real‑time verification systems are under construction to further strengthen protection.

Future focus areas include automated risk analysis, expanding multi‑system defenses, and scaling loss‑prevention drills with intelligent, data‑driven approaches.