Tag

#security

Everything I have written tagged #security, newest first.

2 posts

2024

1 post

AI
Building an Opaque Boundary Around an LLM: Stream Sanitization and Allowlist Provenance
When a model answers over private knowledge, the answer must never leak what it used. How to scrub IRIs, UUIDs, and query fragments across streaming chunk boundaries, and how to project provenance as an allowlist.
Jan 16, 20245 min read

2023

1 post

Algorithms
Token Bucket Rate Limiting and Constant-Time Credential Verification
The small but sharp security machinery behind an API endpoint: in-memory token buckets, peppered SHA-256 with constant-time comparison, and deterministic session namespacing.
Dec 5, 20234 min read