Recent writing.

A component I built so it could never break the main path turned out to be able to hide its own bugs. The two properties arrive together, and separating them took a per-request connection and a real socket.

I built rag-redteam to test the pipeline that turns untrusted documents into trusted context. A frontier-model upgrade did not fix injection. That is the whole point.

Most fuzzing campaigns stop on a wall-clock budget and a shrug. PSBayes estimates the residual risk you are actually carrying, per seed.

Seven merged pull requests across LiteLLM, LlamaIndex, Pydantic, and Haystack. The pattern is always the same: no error, no warning, just quietly wrong.