Technical Writing
Notes on distributed systems, AI infrastructure, databases, and observability. Written for engineers who want depth, not surface-level takes.
I Built a Red Team Orchestrator for AI Agents. Here's What Made It Hard.
AI red-teaming looks like a prompting problem. It isn't. The hard parts were making attacks survive first contact with a guardrail, validating findings against tool calls rather than text, and a budget race condition that let two requests spend $37 against a $20 limit.
Building an AI Security Engineer Before Coding Agents Could Do It
A hybrid static-analysis, semantic-search and LLM pipeline for finding vulnerabilities in source code, built in 2024 because no model could do it alone. We retired it a year later because they could.
Swagger Knows the Endpoints. It Doesn't Know the Workflow.
Generating requests straight from an OpenAPI spec got 10% of endpoints to execute. Treating the spec as a dependency graph instead of a list got us to ~60%. The last stretch needed an agent, and only because deterministic heuristics had stopped paying.