Notes
Technical notes by Shreyansh Kumar Singh
AI & full-stack engineering
Short technical notes by Shreyansh Kumar Singh — each answers one question first-hand, from a system he built. Answer first, then the evidence. Also as an RSS feed.
- How do autonomous penetration-testing tools avoid reporting false positives?By refusing to report anything they can't prove.
- What does an honest security self-audit of an AI application look like, and how should findings be ranked P0 to P3?Review your own system as an outsider would, write every finding down graded by consequence — P0 for security and data exposure, P1 for crashes, P2 for correctness and scale, P3 for polish — lead with the worst, and keep the document next to the fixes.
- How can an AI agent verify that a bug is actually fixed rather than trusting the commit log?Make it re-run the bug, not read the diff: the agent reproduces the reported steps against the live QA environment, captures what the application actually does, and marks the bug fixed only if that evidence shows the defect is gone.
- How should a RAG pipeline be structured so each stage can be tested and replaced independently?Split it into four stages with explicit contracts — embedding (text in, vectors out), storage (vectors and their source passages), retrieval (question in, ranked passages out) and generation (question plus passages in, cited answer out) — and test each stage against its own fixed inputs.
- Why does blast damage radius scale with the cube root of yield?Because a blast's energy spreads through a volume, and volume grows with the cube of distance: to get the same overpressure at a larger distance R, you need energy proportional to R³, so R grows as the cube root of the energy.
- How do you reduce jitter in a React Three Fiber scene without raising the frame rate?Find the per-frame work that changes what's on screen and run it less often.
- Is a canvas image sequence better than a video element for scroll-driven product animation in Next.js?For animation scrubbed directly by the scroll bar, yes: a canvas image sequence maps each scroll position to one exact, already-decoded frame and draws it instantly in either direction, while seeking a compressed video — especially backwards — waits on the decoder and stutters.
- How do you load-test a mobile app's backend with k6 across several machines before a fixed launch date?Run k6 as an agent on each machine, coordinate them from one controller that splits the target request rate and starts them together, script the real user journey rather than single endpoints, and merge the raw results instead of averaging per-machine summaries.