Reading tracker active
0 / 7 read
0%
← Home
Architecture Notes

Technical Writing

Notes on distributed systems, AI infrastructure, databases, and observability. Written for engineers who want depth, not surface-level takes.

RED TEAM ORCHESTRATOR · AI AGENT SECURITY TESTINGORCHESTRATORRed TeamANALYSE + ENHANCEA&E AgentREQUEST BUILDERReq BuilderTARGETAI Agent/ MCP ServerresponseRESP PARSERParserVALIDATIONValidatorREMEDIATIONRemediatenext turnBUDGET GUARDper-run mutexDASHBOARDFindingsHIGH CONFIDENCE ONLYmulti-turn · adaptivearyan.devsecurity · ai-infrastructure
securityai-infrastructure

I Built a Red Team Orchestrator for AI Agents. Here's What Actually Made It Hard.

How I built a multi-agent orchestration pipeline to automatically red-team any AI agent or MCP server — and what surprised me along the way.

Jun 10, 2026·8 min read
AI CODE ANALYSIS · STATIC + SEMANTIC + LLM HYBRIDSTATIC ANALYSISStructuralcall-graph · taint · CPGSEMANTIC SEARCHRetrievalvector embeddings · similarityLLM REASONINGInferenceevidence → judgementEXECUTION PATH · EVIDENCE COLLECTORExec Path BuilderstructuralretrievalinferenceVULNERABILITY ANALYSISVuln Analysis Agentre-planRESULT70% more findings · 0 false positivesaryan.devsecurity · ai-infrastructure
securityai-infrastructure

Building an AI Security Engineer Before Coding Agents Could Do It

How I built a hybrid static-analysis + semantic-search + LLM pipeline to automatically find vulnerabilities in source code — and why none of it was really a model problem.

Oct 20, 2025·7 min read
OPENAPI DEPENDENCY GRAPH · WORKFLOW EXECUTIONOPENAPI SPECSwaggerROOT APIPOST /usersDEPENDS ONGET /users/{id}DEPENDENTPOST /projectsPARAM CACHEuserId, id...SUCCESSResolvedAI-ASSISTED RECOVERY FOR EDGE CASESWhen deterministic logic reaches limitsCOVERAGE10% → 60% successful API executionaryan.devapi-design · ai-infrastructure
securityai-infrastructure

Swagger Knows the Endpoints. It Doesn't Know the Workflow.

How I turned a static OpenAPI specification into realistic, stateful API traffic — building a dependency graph across hundreds of endpoints so a security-testing pipeline could replay requests that actually pass validation.

Sep 15, 2025·11 min read