Blog

Technical notes from the build

Essays on AI systems, retrieval, architecture, and the kind of engineering choices that matter once software leaves the demo.

May 28, 2026Anurag Kotha

Minimizing Application Area: A Practical Way to Reduce Software Supply-Chain Risk

From the 2018 AUR compromise to Log4Shell, every dependency expands your trust surface well beyond the code itself. Here's how I think about shrinking it.

#Security#Supply Chain#Software Engineering#DevSecOps#Dependencies

May 26, 2026Anurag Kotha

The Hardest Part of Legal RAG Was Teaching It Not to Answer

Lessons from building LexAI, a legal RAG experiment around India's transition from IPC, CrPC, and IEA to BNS, BNSS, and BSA.

#RAG#Legal AI#LLM#AI Engineering#System Design#Retrieval Augmented Generation