Skip to content
ponderance / anmol

crease pattern → crane

Rigorous systems,
folded into things
that feel alive.

I'm an ML and security engineer, and I ship real production frontends. By day: model work and edge infrastructure. The rest of the time: origami, a saxophone, engineering projects, and the occasional derivation that wouldn't leave me alone.

See the workshop → or commission work →
grus japonensis

shreyachanth.com

A full production build on Cloudflare, with Turnstile and rate-limited functions guarding the inquiry path, R2 for media, a CI gate that won't merge until it passes, and an editing flow a non-technical client actually uses without calling me. WCAG AA throughout.

Cloudflare Workers Turnstile R2 CI-gated
Read the case study →

Three folds of one sheet

Machine learning

Model work, including contributions to IBM Granite.

Security

Research, and the paranoia that keeps builds honest.

Frontend + infra

Production sites with real CI/CD and edge deploys.

Latest from Marginalia

All notes →
2026-06-29 · homelab · engineering

The filesystem was the bug

A null byte in my .env finally made me look at the filesystem under the whole stack: exFAT, fine for six terabytes of write-once movies and quietly hostile to a directory of small databases rewritten every few seconds. Moving just that hot little part off it, without touching the media on the same disk, came down to two traps, a volume rename hiding inside the folder name and Docker's habit of inventing an empty config directory when you point it at the wrong path.

 2026-06-29 · security · homelab

The socket is root

I wanted a button in my phone app that restarts a wedged container, and the obvious way to build it, handing the app the Docker socket, quietly hands a public-facing web app root on the host. The version I trust instead is built out of refusals: a proxy that forwards only the verbs I name, a write key that never travels with the read key, and a short list of containers the control plane is forbidden from ever touching, starting with its own plumbing.

Off the clock

origami the saxophone deep space homelabbing 3d printing Doctor Who jazz at 1am