/ writing
Writing.
Occasional notes on backend systems, agent architectures, and lessons from shipping ambiguous work.
Building an agent skill that actually reviews backend performance
Why most AI performance reviews are worthless, and how I built an open-source agent skill that enforces evidence discipline instead of manufacturing findings.
Backend Cryptography & Encryption: A Practical Guide
A practical, runnable backend cryptography reference for Node.js/TypeScript developers. Covers AES-256-GCM, password hashing, HMAC, RSA, Ed25519, TLS, key management, and common mistakes.
Closing the SSRF gap nobody's fetch server closes
Why I built Safe-Fetch, an MCP fetch server with SSRF defense as the entire point, not an afterthought.