Srikanth Bandaru: writingInteractive explainers for working engineers.https://bsrikanth.com/enCode review was never about the bugshttps://bsrikanth.com/writing/code-review-not-bugs/https://bsrikanth.com/writing/code-review-not-bugs/An opinion piece on what code review is for, backed by the research, with an AI reviewer as the comparison.Sun, 01 Nov 2026 00:00:00 GMTThe A/B testing casinohttps://bsrikanth.com/writing/ab-testing-casino/https://bsrikanth.com/writing/ab-testing-casino/Why about 1 in 4 significant A/B wins is noise, why fixing peeking doesn’t change that, and why shipped wins add up to more than you got.Sat, 31 Oct 2026 00:00:00 GMTChrome changes how it counts in May 2027https://bsrikanth.com/writing/crux-counts-soft-navigations/https://bsrikanth.com/writing/crux-counts-soft-navigations/Chrome’s public speed data is starting to count soft navigations. If the plan holds, single-page app charts may jump in May 2027 even though nothing in the app changed. Put a note on them now.Sat, 17 Oct 2026 00:00:00 GMTYour auth token is a cachehttps://bsrikanth.com/writing/auth-token-is-a-cache/https://bsrikanth.com/writing/auth-token-is-a-cache/A token is a cached decision. Who holds copies, how stale they may get, and which way they fail decide which revocation scheme works.Mon, 12 Oct 2026 00:00:00 GMTA migration is done when the last reader is gonehttps://bsrikanth.com/writing/last-reader-gone/https://bsrikanth.com/writing/last-reader-gone/The contract step of a schema change is a proof, one reader at a time. A short note on who the readers are and how each proof fails.Sat, 03 Oct 2026 00:00:00 GMTGPU to pixelhttps://bsrikanth.com/writing/gpu-to-pixel/https://bsrikanth.com/writing/gpu-to-pixel/Where a streamed reply gets held, cut or re-counted on its way to the screen, with a table of symptoms and fixes.Sun, 27 Sep 2026 00:00:00 GMTClick once, charge twicehttps://bsrikanth.com/writing/click-once-charge-twice/https://bsrikanth.com/writing/click-once-charge-twice/An idempotency key has to live exactly as long as the customer’s intent to pay. Too short charges twice. Too long replays the wrong order.Sat, 19 Sep 2026 00:00:00 GMTTwo tabs, one refresh tokenhttps://bsrikanth.com/writing/two-tabs-one-refresh-token/https://bsrikanth.com/writing/two-tabs-one-refresh-token/Refresh-token rotation plus 2 tabs can log a user out. The Web Locks API lets only 1 tab refresh at a time.Sat, 15 Aug 2026 00:00:00 GMTEvery user got faster. The average got worse.https://bsrikanth.com/writing/every-user-got-faster/https://bsrikanth.com/writing/every-user-got-faster/The YouTube Feather story, with a model you can play with. A faster page can reach people who used to give up, so check who is in an average before you trust it.Sun, 19 Jul 2026 00:00:00 GMTWidth flows down, height flows uphttps://bsrikanth.com/writing/width-flows-down/https://bsrikanth.com/writing/width-flows-down/Why height: 100% doesn’t fill and flex items won’t shrink, from the direction each size travels through the box tree.Sat, 04 Jul 2026 00:00:00 GMTPrompt injection is a 2600 Hz whistlehttps://bsrikanth.com/writing/prompt-injection-2600hz/https://bsrikanth.com/writing/prompt-injection-2600hz/Three industries fixed attacks where data acts as a command, and none of them did it with a better filter. What that means for AI agents.Sat, 27 Jun 2026 00:00:00 GMT