Technical articles on software supply chain security, in-toto, aflock, Kubernetes, Go, and open source.https://rahulxf.com/enhttps://rahulxf.com/blog/introducing-aflock-package-lock-json-but-for-ai-agents/https://rahulxf.com/blog/introducing-aflock-package-lock-json-but-for-ai-agents/A short introduction to aflock, a system for constraining AI agents with signed policies and verifying their behavior with cryptographically signed in-toto attestations.Sun, 01 Mar 2026 00:00:00 GMTAI SecurityAI AgentsMCPOpen SourceAttestationshttps://rahulxf.com/blog/why-i-joined-testifysec-and-contribute-to-witness-archivista/https://rahulxf.com/blog/why-i-joined-testifysec-and-contribute-to-witness-archivista/Why I decided to join TestifySec, explore software supply chain security more deeply, and contribute to Witness and Archivista under the in-toto ecosystem.Sat, 11 Oct 2025 00:00:00 GMTSoftware Supply ChainDevSecOpsin-totoTestifySechttps://rahulxf.com/blog/creating-an-alpine-package-for-a-go-application-apkbuild/https://rahulxf.com/blog/creating-an-alpine-package-for-a-go-application-apkbuild/A practical walkthrough for packaging a simple Go application for Alpine Linux using APKBUILD, from setup and checksums to building and submitting.Wed, 27 Aug 2025 00:00:00 GMTLinuxAlpineGoPackagingDevOpshttps://rahulxf.com/blog/introduction-to-witness-verifying-software-supply-chain-attestations/https://rahulxf.com/blog/introduction-to-witness-verifying-software-supply-chain-attestations/A practical introduction to Witness: generating keys, recording attestations, signing policy, and verifying a simple Go binary against supply chain requirements.Sat, 23 Aug 2025 00:00:00 GMTin-totoWitnessSoftware Supply ChainSecurityAttestationhttps://rahulxf.com/blog/alpine-linux-package-management-practice/https://rahulxf.com/blog/alpine-linux-package-management-practice/A hands-on overview of Alpine package management with apk, including update, add, delete, search, inspect, verify, and graphing package dependencies.Mon, 28 Jul 2025 00:00:00 GMTLinuxPackage ManagementAlpine LinuxSystemshttps://rahulxf.com/blog/crud-k8s-deployment-implementation-using-client-go-and-k8s-io-api/https://rahulxf.com/blog/crud-k8s-deployment-implementation-using-client-go-and-k8s-io-api/A practical walkthrough for implementing create, read, update, and delete operations for Kubernetes Deployments using client-go, Gin, and YAML input handling.Thu, 20 Feb 2025 00:00:00 GMTGoKubernetesclient-goAPIControllerhttps://rahulxf.com/blog/websocket-and-informer-implementation-in-golang-custom-k8s-controller/https://rahulxf.com/blog/websocket-and-informer-implementation-in-golang-custom-k8s-controller/A walkthrough of using Kubernetes informers and a workqueue to stream deployment changes over WebSocket in a custom Go controller.Tue, 18 Feb 2025 00:00:00 GMTGoKubernetesInformerWebSocketControllerhttps://rahulxf.com/blog/informer-implementation-with-newsharedinformerfactorywithoptions/https://rahulxf.com/blog/informer-implementation-with-newsharedinformerfactorywithoptions/A focused look at scoping Kubernetes informers to a specific deployment and streaming targeted workload updates over WebSocket.Tue, 18 Feb 2025 00:00:00 GMTGoKubernetesInformerWebSocketclient-gohttps://rahulxf.com/blog/understanding-webrtc-building-a-real-time-interactive-portal/https://rahulxf.com/blog/understanding-webrtc-building-a-real-time-interactive-portal/A guide to building a WebRTC-based collaborative portal with video, screen sharing, messaging, file transfer, Monaco, and Yjs-powered collaboration.Sun, 15 Dec 2024 00:00:00 GMTWebRTCJavaScriptReal Time CommunicationP2PTutorialhttps://rahulxf.com/blog/webscraping-using-puppeteer/https://rahulxf.com/blog/webscraping-using-puppeteer/Notes from experimenting with Puppeteer, stealth plugins, randomized user agents, and scraping tweet content in a more resilient way.Sun, 15 Dec 2024 00:00:00 GMTPuppeteerWeb ScrapingTypeScriptAutomationhttps://rahulxf.com/blog/generate-random-user-agent-custom-script/https://rahulxf.com/blog/generate-random-user-agent-custom-script/A small custom TypeScript utility for generating newer, randomized browser user agents instead of relying on stale package defaults.Thu, 19 Dec 2024 00:00:00 GMTTypeScriptAutomationNPMUser Agent