<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Yonas Mekonnen · Writing</title><description>Notes on backend systems, agents, and shipping ambiguous work as a Forward Deployed Engineer.</description><link>https://yonas-mekonnen-portfolio-zeta.vercel.app/</link><language>en-us</language><item><title>Building an agent skill that actually reviews backend performance</title><link>https://yonas-mekonnen-portfolio-zeta.vercel.app/blog/building-backend-performance-review/</link><guid isPermaLink="true">https://yonas-mekonnen-portfolio-zeta.vercel.app/blog/building-backend-performance-review/</guid><description>Why most AI performance reviews are worthless, and how I built an open-source agent skill that enforces evidence discipline instead of manufacturing findings.</description><pubDate>Wed, 26 Aug 2026 00:00:00 GMT</pubDate><category>ai-agents</category><category>performance</category><category>open-source</category><category>python</category><category>claude-code</category></item><item><title>Backend Cryptography &amp; Encryption: A Practical Guide</title><link>https://yonas-mekonnen-portfolio-zeta.vercel.app/blog/backend-cryptography-guide/</link><guid isPermaLink="true">https://yonas-mekonnen-portfolio-zeta.vercel.app/blog/backend-cryptography-guide/</guid><description>A practical, runnable backend cryptography reference for Node.js/TypeScript developers. Covers AES-256-GCM, password hashing, HMAC, RSA, Ed25519, TLS, key management, and common mistakes.</description><pubDate>Mon, 24 Aug 2026 00:00:00 GMT</pubDate><category>cryptography</category><category>security</category><category>typescript</category><category>node.js</category><category>backend</category></item><item><title>Closing the SSRF gap nobody&apos;s fetch server closes</title><link>https://yonas-mekonnen-portfolio-zeta.vercel.app/blog/safe-fetch-ssrf-defense/</link><guid isPermaLink="true">https://yonas-mekonnen-portfolio-zeta.vercel.app/blog/safe-fetch-ssrf-defense/</guid><description>Why I built Safe-Fetch, an MCP fetch server with SSRF defense as the entire point, not an afterthought.</description><pubDate>Thu, 13 Aug 2026 00:00:00 GMT</pubDate><category>mcp</category><category>security</category><category>typescript</category></item></channel></rss>