Architecture

From AI support copilot to agentic customer service

TL;DR Tokenizing at intake does nothing for the return path. Evidence agents query the CRM and raw identity comes back as a tool result, straight into…

How I Built a Privacy-First Browser Game Portal with Click-to-Load Iframes

Embedding a browser game looks simple: <iframe src= "https://games.example.net/my-game" ></iframe> That line lets a third party join the p…

i have a requirement to create a feedback app, the feedback should be visible only to the person who got the feedback and HR admin, no one else should see the feedback including support person, DBA and others, what is the best way to design it using keys

Age Checks Are Going Digital. They Should Go Zero-Knowledge.

On June 30, 2026, the UK Home Office laid regulations allowing licensed premises in England and Wales to accept digital proof of age for alcohol sales…

Why Developer Utilities Should Process Sensitive Data in Your Browser

Developers paste surprisingly sensitive information into online utilities every day: API responses, access tokens, database records, cURL commands, an…

Why I built Sanctuary: A local-first, zero-tracking reflection app

Most journaling and mental wellness apps require syncing sensitive personal thoughts to cloud servers where they risk being mined or exposed. I wanted…

Treat Health-Data Revocation as a Distributed Convergence Protocol

Counterexample: a connector grant is revoked at epoch 8, but an import message created under epoch 7 is delayed. The primary store deletes its copy, t…

Run a Connected Health Record Pipeline Incident Without Guessing at the Data

At 09:14, successful connector jobs drop while queue age rises. At 09:17, dashboard reads remain normal because cached records are still available. Is…

Put Health-Data Access Behind a Consent-Receipt API

A person taps “Disconnect,” the UI flips to a reassuring state, and a queued import starts with yesterday’s authorization snapshot. That is a full-sta…

Why I built Sanctuary: A local-first, zero-tracking reflection app

Most journaling and mental wellness apps require syncing sensitive personal thoughts to cloud servers where they risk being mined or exposed. I wanted…

Letting a stranger contact a car owner without giving them the number

Letting a stranger contact a car owner without giving them the number There is a small, very common problem in Indian cities that turns out to be a su…

How I Built a UK-Focused Converter Site with Astro 5, React 19, and Tailwind 4 — Zero JS by Default, 100% Private

I got tired of searching "gas mark 4 to celsius" and landing on ad-heavy US sites that had never heard of a British oven. So I built the site I wanted…

A 100% client-side toolbox: shipping 17 calculators with no backend

Doing video work in the browser sounds like a compromise — until you realize the alternative is uploading proprietary footage and delivery specs to so…

A Practical Privacy Threat Model for Consumer Companion Robots

A companion robot is not one device from a privacy perspective. It is a small distributed system inside a home. The physical shell may contain cameras…

Why Child Safety Tracking Should Never Be Paywalled

Some features should never be locked. Child safety is one of them. That belief shaped WIN RAK from day one. A Real Scenario A father and son are visit…

GDPR Compliance for Systems-Oriented SaaS: A Developer's Implementation Guide

GDPR Compliance for Systems-Oriented SaaS: A Developer's Implementation Guide GDPR compliance for systems-oriented SaaS products presents unique chall…

AI Agent Data Minimization: Give Tools Less Context Without Breaking Results

Your agent does not need the whole customer record to answer one question. It does not need every Slack thread, every CRM field, every file in Drive, …

AI Help With Your Database Design, Without the Cloud

Disclosure: I build Schemity , a desktop ERD tool - this post is from our blog and uses it for the examples. TL;DR: You want AI help with schema desig…

Blinding the State Informant: How Axiom Shield Weaponizes Client-Side Sandboxing Against EU Chat Control

The regulatory push for EU Chat Control 2.0 has exposed a fundamental architectural vulnerability in modern operating systems. Governments have realiz…

Owning your AI: why I self-host a personal assistant with long-term memory

For the past few months I've been running my personal AI assistant on my own hardware instead of a third-party cloud. Here's why — and what I learned.…

Stop Sending Your Snores to the Cloud: Build a Privacy-First Sleep Guardian with Whisper-tiny and TCN on Raspberry Pi

Let’s be honest: no one wants their private nighttime "soundtrack" (a.k.a. snoring or heavy breathing) being uploaded to a corporate server for "analy…

Building a Confidential Cross-Chain Identity Protocol with Oasis Sapphire, ENS & Base

The biggest paradox in Web3 identity is that while we demand privacy in the real world, our on-chain infrastructure defaults to absolute transparency.…

Local-first RAG for privileged legal documents: why citations need verification

Lawyers want the same thing everyone else wants from AI: ask a question, get a useful answer, move faster. The difference is that legal documents ofte…

Building an Offline AI Note-Taking App with WebGPU

For the last few months, I’ve been obsessed with a specific problem: the friction between privacy and utility in modern AI tools. Most "private" AI so…

How I Shipped 91+ Privacy-First Utilities with $0 Server Cost: The Architecture of OmniUtil.pro

Every time you want to format a piece of JSON, debug a JWT token, compress a PDF, or erase a photo's background, you make a compromise. You upload you…

Building KunciMasuk, a Privacy-First SSH Launcher

Hi Everyone. Approximately a month ago, I developed a Bash script to streamline server access for myself and my colleagues. The feedback was construct…

Bitwarden vs 1Password: Which Password Manager Should You Use?

A feature-by-feature comparison of two leading password managers — open source and free versus polished and premium — to help you pick the right one. …

I built a privacy-first alternative to jwt.io, regex101 and every other dev tool that phones home

The dirty secret of online dev tools Every dev tool lives on a different website. jwt.io for JWT decoding. regex101 for regex testing. Some random sit…

Why ccRewind never writes to ~/.claude/

ccRewind reads ~/.claude/projects/*.jsonl , parses them, indexes them into a local SQLite database, and renders the result back as a searchable, brows…

Evident: Proving Digital Ownership Without Revealing Your Content

In the era of AI-generated content, copyright disputes, and data leaks, proving that a specific file existed at a specific time is a significant chall…