What I write about
AI
LLMs, RAG pipelines, agents, embeddings, and production AI systems.
0 posts
Backend
Node.js, FastAPI, databases, APIs, and server-side architecture.
1 posts
Architecture
System design, SaaS patterns, distributed systems, and scalability.
0 posts
Security
OAuth, JWT, authentication flows, and web application security.
1 posts
Notes
Quick learnings, migration notes, cheatsheets, and TILs.
0 posts
Recent writing
Row Level Security in PostgreSQL: Multi-Tenant Data Isolation Done Right
How to implement per-tenant data isolation at the database layer using PostgreSQL RLS — without leaking data across tenants or killing performance.
OAuth 2.0 Flows Explained Without the Hand-Waving
A clear breakdown of Authorization Code, Client Credentials, and PKCE flows — when to use which, what the tokens actually mean, and where implementations go wrong.