Thoughts on software engineering, design, and things I find interesting.
A component I built so it could never break the main path turned out to be able to hide its own bugs. The two properties arrive together, and separating them took a per-request connection and a real socket.
I built rag-redteam to test the pipeline that turns untrusted documents into trusted context. A frontier-model upgrade did not fix injection. That is the whole point.
Most fuzzing campaigns stop on a wall-clock budget and a shrug. PSBayes estimates the residual risk you are actually carrying, per seed.
Ten merged pull requests across LiteLLM, LlamaIndex, Pydantic, and Haystack. The pattern is always the same: no error, no warning, just quietly wrong.
