OldKnowledge,New Vessel.
Essays on on-device AI, data sovereignty, and building systems that keep knowledge where it belongs.
Enter the archive →— 00 / ThesisEvery business runs on knowledge older than its software.
Latest Entries
Building DPDP-Compliant Systems for Minors: Consent Engine, Feed Gating, and an Audit Trail That Holds
The 3-Tier Parental Control Architecture: Why App Settings Alone Never Work
Regulating the Feed, Not Just the Data: Why India's DPDP Act Won't Fix Social Media for Children
The Agentic Web: Your Next Million Visitors Are AI Agents, and Your Site Isn't Built for Them
HTMX vs Next.js in 2026: Hypermedia or SPA — and Is HTMX Just PHP With Better Manners?
अथ प्रथमोऽध्यायः ॥
विद्या ददाति विनयं विनयाद् याति पात्रताम् ।
पात्रत्वाद्धनमाप्नोति धनाद्धर्मं ततः सुखम् ॥
We digitize centuries-old manuscripts. Then we build with the same discipline.
AppScale's roots are in a quiet project: structuring classical Sanskrit texts into faithful digital form. Extraction, structure, provenance, sovereignty — the same principles now power our client work.
Built for Every Business
Intelligence that never leaves the device
Offline-first, data-sovereign systems — LLMs, vector search, inference at the edge.
02Document IntelligenceAir-gapped document vaults
Sealed, searchable, provable.
03AI ProductsFull-cycle AI product builds
Mobile-first, production-grade.
04MCP & AI SecuritySecuring the agentic stack
Tool poisoning, prompt injection, confused deputies — studied and hardened.
05Indic Language AIOCR for scripts the world forgot
Sovereign OCR for Indic scripts.
06Consulting & Architecture19+ years shipping at scale
OTT, e-commerce & mobility platforms serving millions.
Building DPDP-Compliant Systems for Minors: Consent Engine, Feed Gating, and an Audit Trail That Holds
DPDP Rule 10 is notified law on a deadline. The consent state machine, age-band tokens, feed gating, and an audit trail that survives someone trying to rewrite it.
The 3-Tier Parental Control Architecture: Why App Settings Alone Never Work
You maxed out every parental control the app offers and the feed is still wrong. The three tiers that actually hold: DNS filtering, OS hard gates, and feed modification.
Regulating the Feed, Not Just the Data: Why India's DPDP Act Won't Fix Social Media for Children
A platform can be fully compliant with India’s DPDP Act and still run an engagement-maximising feed at a fourteen-year-old. Why privacy law misses the curation problem.
The Agentic Web: Your Next Million Visitors Are AI Agents, and Your Site Isn't Built for Them
Half your traffic has no eyes. It extracts, cites, and acts — and a site built for human browsers fails it silently. The agentic-web architecture: structure, llms.txt, bot policy.
HTMX vs Next.js in 2026: Hypermedia or SPA — and Is HTMX Just PHP With Better Manners?
Your CRUD dashboard ships 900KB of JavaScript to render a table. HTMX vs Next.js in 2026: architectures, the PHP question, pros and cons, and the decision that actually matters.
How to Actually Evaluate a RAG System in 2026: Faithfulness, Groundedness, and the Metrics That Catch Failures
Your RAG "feels accurate" in the demo and is quietly wrong at scale. Evaluate it as two systems: retrieval metrics + faithfulness/groundedness, in a golden-set harness in CI.
Stop Hand-Tuning Prompts: Programmatic Prompt Optimization and the DSPy Shift in 2026
Three weeks nudging a prompt and it still breaks. Stop hand-tuning: programmatic prompt optimization (DSPy) specifies the task and metric and compiles the prompt for you.
Time-Series Foundation Models in Production 2026: Zero-Shot Forecasting That Beats Your Tuned Pipeline
You maintain forty forecasting models. One pretrained model now beats them zero-shot. Time-series foundation models in production: benchmarking, covariates, uncertainty, serving.
Model Deprecation Is a Production Outage With a Calendar Date: The Migration Architecture for 2026
Your provider just announced the model you run on shuts down in 90 days. The migration architecture — inventory, abstraction, version pinning, golden-set evals, canary rollout.
The 5% GPU Utilization Problem: Why Your Inference Bill Is Enormous and Your GPUs Are Idle
Your GPU bill soars while the GPUs sit ~95% idle. It’s a utilization problem, not a capacity one — continuous batching, scale-to-zero, fractional GPU, and the demand-side fix.
Why 86% of Multi-Agent Pilots Never Reach Production — and the Orchestration Architecture That Ships
The multi-agent demo dazzled; the system died before production. Only ~14% of pilots ship — the orchestration reliability layer, compounding-error math, and how to reach 99%.
Late-Interaction Retrieval in 2026: When Your RAG Fails Because a Single Vector Isn't Enough
Your RAG isn’t hallucinating — retrieval handed it the wrong chunk because one vector blurred the detail. Late interaction (ColBERT) and visual retrieval (ColPali), right-sized.
Why Your AI Agent Gets Worse Over Time: Memory Staleness, Context Rot, and the Invalidation Architecture
The agent that dazzled in week one is confidently wrong by month six — its memory only grows, never expires. Context rot, staleness, and the invalidation fix.
Securing Edge AI in 2026: Defending On-Device Models Against Theft, Tampering, and Extraction
You moved inference on-device for speed and privacy — and shipped your million-dollar weights to the attacker. Securing edge AI: theft, tampering, extraction, and the hybrid line.
Agentic AI in Cybersecurity: Strengthening Defenses Autonomously — Without Handing the Attacker Your Keys
An AI agent can contain an intrusion in 90 seconds — or be turned against you by one poisoned alert. The agentic SOC: bounded authority, six guardrails, investigator-first.
Game Development in the Fable 5 Era: The AI-Assisted Asset and Code Pipeline That Actually Ships
A three-person team can now scope a fifteen-person game — if the build runs as a pipeline. AI-assisted game dev in the Fable 5 era: direction bibles, verification gates, playtests.
Mobile App Development in the AI Era: On-Device Agents, the New Stack, and What Ships in 2026
The AI feature demos on the founder’s flagship — and 60% of users can’t run it. The 2026 mobile stack: on-device models, hybrid routing, agents, battery budgets, fallbacks.
The AI Code Verification Bottleneck: Architecture for Reviewing at Generation Speed
Your team merges AI code faster than anyone can review it — and trust breaks first. The verification pyramid, blast-radius tiers, and org design for reviewing at generation speed.
WebGPU in Production 2026: The Browser Is Now a GPU Target — Graphics, Compute, and AI Inference
WebGPU hit baseline: compute shaders and AI inference in the browser, 10-15x on compute work. The production architecture — engine vs raw API, fallback ladders, in-page ML.
Prompt-Driven Graphics in 2026: Generating 3D and 2D Scenes with AI Without Shipping the Demo
Prompt a running 3D scene into existence in minutes — then watch it leak memory in production. The generate-direct-engineer pipeline that makes AI graphics shippable in 2026.
Bring this thinkingto your business.
conversation
One essay, most weeks. No noise.