https://asvanthc.github.io/ Software Engineer at Zeetaminds working across backend systems, identity and access management, digital signage device platforms and web applications — currently going deeper on AI engineering and distributed systems. en asvanthc@gmail.com (Asvanth C) Sun, 24 May 2026 00:00:00 GMT https://asvanthc.github.io/writing/what-changes-when-software-engineering-meets-ai/ https://asvanthc.github.io/writing/what-changes-when-software-engineering-meets-ai/ A backend engineer's notes on what an LLM really changes in a system: a non-deterministic component with no contract, and the ordinary discipline around it. Sun, 24 May 2026 00:00:00 GMT Asvanth C AI Engineering Architecture LLM https://asvanthc.github.io/writing/designing-iam-as-a-separate-domain/ https://asvanthc.github.io/writing/designing-iam-as-a-separate-domain/ Identity needs its own domain boundary: authentication decisions leak into state, session lifetime and service trust, so scattering them erases your trust boundaries Sun, 15 Mar 2026 00:00:00 GMT Asvanth C Identity Architecture Security https://asvanthc.github.io/writing/debugging-production-start-with-evidence/ https://asvanthc.github.io/writing/debugging-production-start-with-evidence/ A procedure for debugging production systems, where the expensive failure mode is not being wrong but being confident and wrong before you have gathered anything. Sun, 18 Jan 2026 00:00:00 GMT Asvanth C Debugging Production Observability https://asvanthc.github.io/writing/building-across-tizen-webos-and-android/ https://asvanthc.github.io/writing/building-across-tizen-webos-and-android/ What changes when the browser is welded to firmware, the device is in a shop you cannot visit, and the vendor API has no common shape. Sun, 09 Nov 2025 00:00:00 GMT Asvanth C Devices Tizen webOS Android https://asvanthc.github.io/writing/why-video-plays-on-one-device-but-fails-on-another/ https://asvanthc.github.io/writing/why-video-plays-on-one-device-but-fails-on-another/ A layered mental model for digital signage playback failures: container vs codec vs profile and level vs the hardware decoder that actually has to run it. Sun, 21 Sep 2025 00:00:00 GMT Asvanth C Media Devices Debugging https://asvanthc.github.io/writing/authentication-vs-authorization/ https://asvanthc.github.io/writing/authentication-vs-authorization/ Why treating a valid session as permission produces a whole bug class, and where the ownership check actually belongs. Sun, 03 Aug 2025 00:00:00 GMT Asvanth C Identity Architecture Security https://asvanthc.github.io/writing/jwt-jwks-rs256-how-token-verification-works/ https://asvanthc.github.io/writing/jwt-jwks-rs256-how-token-verification-works/ A JWT is signed, not encrypted, and verifying one means checking the signature and the claims — here is how RS256, kid, JWKS and alg confusion fit together. Sun, 22 Jun 2025 00:00:00 GMT Asvanth C JWT Security Identity https://asvanthc.github.io/writing/pkce-why-modern-oauth-clients-need-it/ https://asvanthc.github.io/writing/pkce-why-modern-oauth-clients-need-it/ Why a public OAuth client cannot prove who it is at the token endpoint, how a stolen authorization code turns into real tokens, and how PKCE makes that code inert. Sun, 11 May 2025 00:00:00 GMT Asvanth C PKCE OAuth 2.0 Security https://asvanthc.github.io/writing/oidc-vs-oauth2-what-happens-during-login/ https://asvanthc.github.io/writing/oidc-vs-oauth2-what-happens-during-login/ OAuth 2.0 grants permission, not identity. Here is what OpenID Connect adds, why an access token is the wrong thing to read, and how nonce differs from state. Sun, 30 Mar 2025 00:00:00 GMT Asvanth C OpenID Connect OAuth 2.0 Identity https://asvanthc.github.io/writing/oauth2-authorization-code-flow-from-first-principles/ https://asvanthc.github.io/writing/oauth2-authorization-code-flow-from-first-principles/ The Authorization Code flow is not a list of steps to memorise. It falls out of one constraint: the only lever an authorization server has is a redirect. Sun, 16 Feb 2025 00:00:00 GMT Asvanth C OAuth 2.0 Identity Web