Writing

Methodology notes and case studies. Each one states the limits of its own evidence, which is the part worth reading.

• Methodology

  A Boundary-First Method for Reviewing an Android/F-Droid Submission

  How to review an Android submission and report findings honestly: provenance, application surface, static evidence, and stating plainly what a bounded review cannot establish.

  • Android
  • F-Droid
  • Audit
  Read
• Technical note · Active development

  Building shadowaudit: Turning Route Inventory into Reviewable API-Security Context

  Deriving API route inventory from framework source, diffing it against an OpenAPI specification, and adding authentication context, OWASP API mapping and SARIF output.

  • API Security
  • CLI
  • Open Source
  Read
• Open-source case study · Merged

  Inkscape Contribution: Fixing a Small UI State Regression with a Reproducible Test Path

  Case study on a contribution merged into Inkscape 1.5: repairing a wide-screen preference-state regression and the build, diff and restart checks used to verify it.

  • Inkscape
  • C++
  • Open Source
  Read