The Sandbox Had No Internet. The Agents Found One Anyway.
How OpenAI's evaluation agents turned a package mirror into a message board, escaped their sandbox, and compromised Hugging Face production systems.
Mohith’s engineering notebook
Notes on building software that holds up.
Technical deep dives on backend systems, infrastructure, performance, and the assumptions that fail in production.
Latest Notes
31 notesThe Invariants I Didn't Hold
An honest accounting of a write-ahead log: what it guarantees, where the documentation outran the code, and the pattern in every gap.
Testing a Thing Whose Whole Job Is Surviving a Crash
You can't unit test a power cut. What I built instead, and the gap I left in the middle of it.
Checkpoints, and What the Benchmark Wasn't Measuring
A 2.55x speedup that was real, produced by a mechanism that doesn't exist, hiding a bug that resurrects deleted keys.
Three Ways to Recover, and What a Torn Tail Costs
Recovery isn't about salvaging as much as possible. It's about knowing exactly where you stopped believing the file.
Segments, and the fsync That Hit the Wrong File
Splitting the log into files makes almost everything easier. The seam between writing and rotating is where a durability bug was hiding.