System Architect · Security Researcher · Photographer
Morteza
Bahmani
Independent creator exploring the intersection of security, infrastructure, and digital craft. Building at Internet Labs.
Blog
Recent writings on security, infrastructure, and the open web
Hardening Automated PR Review Agents: A Production CI Checklist
Architectural security checklist for deploying automated pull request review bots and hybrid analysis engines without ex…
PostgreSQL Planner Cost Analysis: B-Tree Index Scans vs Sequential Scans
An architectural breakdown of how PostgreSQL evaluates sequential scans against B-Tree index scans based on disk page we…
Defending Entra ID Against Device Code Flow Abuse
A practical security checklist for defending Microsoft Entra ID and Microsoft 365 environments against RFC 8628 OAuth de…
Automated SAST with OpenAI Codex Security: Deterministic AST Analysis Meets LLM Remediation
Static analysis flags security bugs, but traditional SAST tools drown developers in false positives. OpenAI Codex Securi…
Silicon Trust Chains in Multi-Tenant GPU Clusters
Analyzing silicon trust chains, firmware attestation, and hardware security isolation in high-density AI data centers.
Architectural Shifts in Programmatic Web Inspection Engines
Analyzing how browser automation engines scaled from heavy multi-process Chrome binaries to minimal Rust-backed parsing …
Older Posts
Movie Diaries
from Letterboxd Letterboxd
Projects
01 / 04Things I'm building and contributing to
