Writing

Long-form essays on edge security

Architectural deep dives from the work behind Synapse, Signal Horizon, and the Edge Protection Platform. Written for engineers who want to know how things actually work, not just what features exist.

Deep Dive · Synapse Architecture

Every sensor is a brain: rebuilding a WAF without a cloud backend

How Synapse makes every edge location a complete detection engine. Twelve inline capabilities in a single 25MB binary, no cloud round-trip, no background loop, and a command plane that's genuinely optional. The thesis article for the rest of the writing on this site.

Deep Dive · Edge DLP

Line-rate DLP: the literal-first split that runs data loss prevention inline

How Synapse scans 22 sensitive-data patterns sub-millisecond on multi-megabyte bodies, with zero false positives, and still finds time to catch the outbound leaks. Aho-Corasick, zero-allocation validators, a soft 8KB cap, and parallel execution with upstream I/O.

More coming. Next up: the DLP piece's sibling on the PEP-vs-PDP distinction, a methodology post on benchmarking a WAF honestly, and an opinionated thesis on API authorization that's been sitting in a drawer for a while.