https://lokeshrc.me/blog Software engineer in Hyderabad building AI-powered products, RAG pipelines and scalable full-stack systems. Projects, open-source fixes and engineering notes. en-us © 2026 Lokesh Ram Chand B https://lokeshrc.me/web-app-manifest-512x512.png https://lokeshrc.me/blog Wed, 21 Oct 2026 00:00:00 GMT https://lokeshrc.me/blog/accesscraft-community-health-files https://lokeshrc.me/blog/accesscraft-community-health-files Wed, 21 Oct 2026 00:00:00 GMT My PR to accesscraft adds issue forms, contribution policies and CI automation. None of it is code, and all of it decides whether people can contribute. Lokesh Ram Chand B GitHub Actions Open Source CI/CD Community https://lokeshrc.me/blog/cncf-dot-project-github-link-checker https://lokeshrc.me/blog/cncf-dot-project-github-link-checker Tue, 20 Oct 2026 00:00:00 GMT cncf/automation's link checker marked valid GitHub pages like /sponsors and /topics as broken. I made it double-check against github.com before reporting a 404. Lokesh Ram Chand B Go CNCF Testing Open Source https://lokeshrc.me/blog/cncf-kubevirt-runner-empty-jitconfig https://lokeshrc.me/blog/cncf-kubevirt-runner-empty-jitconfig Tue, 20 Oct 2026 00:00:00 GMT The KubeVirt cloud runner in cncf/automation hid its JIT config so well that the runner never received it. I made it substitute the value again and still keep it out of the logs. Lokesh Ram Chand B Go CNCF KubeVirt CI/CD Security Open Source https://lokeshrc.me/blog/cncf-oci-runner-bash-x-jit-leak https://lokeshrc.me/blog/cncf-oci-runner-bash-x-jit-leak Sun, 18 Oct 2026 00:00:00 GMT The OCI cloud runner in cncf/automation ran its start script with bash -x, which traced the GitHub Actions JIT config into the logs. Removing one flag fixed it. Lokesh Ram Chand B Go CNCF CI/CD Security Open Source https://lokeshrc.me/blog/apicurio-integer-default-decimal-literal https://lokeshrc.me/blog/apicurio-integer-default-decimal-literal Mon, 05 Oct 2026 00:00:00 GMT An integer prompt-template variable with a default of 5.0 failed its own type check in Apicurio Registry, because Jackson reads every decimal literal as a Double. Lokesh Ram Chand B Java Apicurio Registry Jackson Open Source Debugging https://lokeshrc.me/blog/birdwatcher-pprof-zero-byte-archives https://lokeshrc.me/blog/birdwatcher-pprof-zero-byte-archives Mon, 28 Sep 2026 00:00:00 GMT Birdwatcher's pprof command archived 0-byte entries for unreachable Milvus nodes and printed the same success message for them. Here's my fix. Lokesh Ram Chand B Go Milvus Observability Open Source Debugging https://lokeshrc.me/blog/birdwatcher-verify-segment-typo https://lokeshrc.me/blog/birdwatcher-verify-segment-typo Mon, 21 Sep 2026 00:00:00 GMT Birdwatcher's verify-segment command was fully written but never registered, because its method was named VerifySegmentCommnad. Fixing the typo exposed a startup panic. Lokesh Ram Chand B Go Milvus Reflection Open Source Debugging https://lokeshrc.me/blog/apicurio-xsd-backward-compatibility-bug https://lokeshrc.me/blog/apicurio-xsd-backward-compatibility-bug Tue, 15 Sep 2026 00:00:00 GMT A code comment said this case was already handled. It wasn't, and I only found out because a sibling method handled the same case properly. Lokesh Ram Chand B Java Apicurio Registry Open Source Schema Compatibility Debugging https://lokeshrc.me/blog/birdwatcher-load-backup-error-race https://lokeshrc.me/blog/birdwatcher-load-backup-error-race Thu, 10 Sep 2026 00:00:00 GMT Birdwatcher's load-backup could report success while dropping keys, because worker goroutines raced on a shared err. I replaced the pattern with errgroup. Lokesh Ram Chand B Go Milvus etcd Concurrency Open Source https://lokeshrc.me/blog/portfolio-security-production-audit https://lokeshrc.me/blog/portfolio-security-production-audit Sat, 05 Sep 2026 00:00:00 GMT I ran a security and production audit on this site. It found an XSS hole in the blog, two vulnerable dependencies, a dead permalink and missing security headers. Lokesh Ram Chand B Security Vue Web Performance Open Source https://lokeshrc.me/blog/birdwatcher-merge https://lokeshrc.me/blog/birdwatcher-merge Thu, 03 Sep 2026 00:00:00 GMT A repair command in Birdwatcher, Milvus's diagnostic tool, could report success while writing corrupted protobuf bytes to etcd. Here's how I found and fixed it. Lokesh Ram Chand B Go Milvus etcd Protobuf Debugging Open Source https://lokeshrc.me/blog/meshery-bounded-k8s-context-registration https://lokeshrc.me/blog/meshery-bounded-k8s-context-registration Tue, 25 Aug 2026 00:00:00 GMT Meshery spawned one unbounded goroutine per Kubernetes context in an uploaded kubeconfig. I capped it with a semaphore so one request can't exhaust the server. Lokesh Ram Chand B Go Meshery Kubernetes Concurrency Security Open Source https://lokeshrc.me/blog/the-bug-that-wasn't-a-bug-yet https://lokeshrc.me/blog/the-bug-that-wasn't-a-bug-yet Mon, 24 Aug 2026 00:00:00 GMT I read Meshery's naming-convention doc closely and found 20 handlers that would break pagination the day the frontend moved to generated clients. Lokesh Ram Chand B Meshery Go API Contracts Bug Fixing Open Source Software Engineering https://lokeshrc.me/blog/birdwatcher-multisave-not-implemented https://lokeshrc.me/blog/birdwatcher-multisave-not-implemented Sun, 23 Aug 2026 00:00:00 GMT FileAuditKV.MultiSave in Birdwatcher always returned 'not implemented'. That broke one repair command outright and made restore silently write zero keys. Lokesh Ram Chand B Go Milvus etcd Open Source Debugging https://lokeshrc.me/blog/pymilvus-binary-vector-typeerror https://lokeshrc.me/blog/pymilvus-binary-vector-typeerror Sun, 23 Aug 2026 00:00:00 GMT pymilvus's binary-vector check raised a raw TypeError on None values instead of returning False. Swapping two lines fixed it. Lokesh Ram Chand B Python Milvus pymilvus Validation Open Source https://lokeshrc.me/blog/hardening-fastapi-ai-api-preproduction https://lokeshrc.me/blog/hardening-fastapi-ai-api-preproduction Sat, 22 Aug 2026 00:00:00 GMT What my pre-production audit of Velar found: zero indexes, a root container, a concurrency race, and two security bumps that broke things. Lokesh Ram Chand B Machine Learning FastAPI MongoDB Docker Security Production Readiness https://lokeshrc.me/blog/nango-customer-key-cleanup-trigger https://lokeshrc.me/blog/nango-customer-key-cleanup-trigger Sun, 09 Aug 2026 00:00:00 GMT A Postgres trigger in Nango hard-deleted an API key whenever any of its environments was removed, even if the key still belonged to others. I made it relation-aware. Lokesh Ram Chand B PostgreSQL TypeScript Nango Databases Open Source https://lokeshrc.me/blog/roster-hitl-migration-seq-not-clock https://lokeshrc.me/blog/roster-hitl-migration-seq-not-clock Sun, 09 Aug 2026 00:00:00 GMT roster's v1 to v2 HITL migration refused valid history whenever two events landed in the same millisecond. The ledger already had a sequence number that fixed it. Lokesh Ram Chand B TypeScript Node.js Testing Open Source Debugging https://lokeshrc.me/blog/why-i-didnt-just-use-chatgpt-for-transaction-parsing https://lokeshrc.me/blog/why-i-didnt-just-use-chatgpt-for-transaction-parsing Sat, 08 Aug 2026 00:00:00 GMT I put three cheap, deterministic layers in front of the LLM in Velar, and gave the pipeline permission to say 'I don't know.' Lokesh Ram Chand B Machine Learning FastAPI MongoDB System Architecture LLM https://lokeshrc.me/blog/grounded-rag-pipeline-milvus-ollama-velar https://lokeshrc.me/blog/grounded-rag-pipeline-milvus-ollama-velar Fri, 07 Aug 2026 00:00:00 GMT How I kept Velar's explanations local and grounded: Ollama for embeddings and generation, Milvus for lookup, and an early return when there's nothing to ground on. Lokesh Ram Chand B Machine Learning FastAPI MongoDB Milvus Ollama RAG System Architecture Privacy https://lokeshrc.me/blog/designing-trust-state-machine https://lokeshrc.me/blog/designing-trust-state-machine Sat, 01 Aug 2026 00:00:00 GMT How I made merchant trust an explicit state in Velar, the race condition I almost shipped, and the decay question I still haven't answered. Lokesh Ram Chand B Machine Learning FastAPI MongoDB System Architecture Engineering https://lokeshrc.me/blog/nginx-configuration-maintainable https://lokeshrc.me/blog/nginx-configuration-maintainable Wed, 22 Jul 2026 00:00:00 GMT How my reverse proxy config went from one fragile file to something I can change without fear, and the reload mistake I kept making. Lokesh Ram Chand B DevOps Infrastructure Engineering https://lokeshrc.me/blog/personal-cloud-self-hosting https://lokeshrc.me/blog/personal-cloud-self-hosting Mon, 20 Jul 2026 00:00:00 GMT Why I built my own cloud on Proxmox, and what I learned getting a static IP, a reverse proxy, Keycloak and monitoring running at home. Lokesh Ram Chand B Architecture Self-Hosting Cloud