Haruka Kaya / Technical journal
Investigating boundaries in permissions, inputs, and state. I document implementation and verification, separating observed behavior from inferred impact.
Lessons from connecting Google services to a personal AI assistant, including renewed OAuth consent and a missing items field in an array schema.
Invalidating old approval and pending delivery when content changes. Implementation notes on defining exactly what was authorized.
Consolidating the data behind overview, insights, and progress, while keeping measured results separate from expected performance improvements.
Notes from a Python V-carving tool, covering coordinate mismatches, slider updates, and why displaying the input does not validate the output.
Research within authorized scope, with reproducible conditions and recorded evidence.
I do not stop at looking at an app or an API. I trace which permission, which input, and how far the impact reaches. I reproduce within authorized scope and report confirmed facts separately from assumptions.
IPC, exported components, permission boundaries
Authentication, tokens, access control
Prompt injection, tool authorization
Undisclosed reports and confidential service details are excluded. Tests, real-environment observations, and unverified hypotheses are documented separately.
An internal platform for security research within authorized scope. A pre-execution policy check blocks out-of-scope actions, while audit logs preserve decisions and evidence.
Internal project / Source not published
I built a web and Android tool to make attendance tracking for club activities a little easier. I keep improving it while it is being used.
A fork of Microsoft's Agent Governance Toolkit used for learning and evaluation.
Python GUI that generates G-code for V-carve CNC engraving from DXF files. Extracts the skeleton with medial axis + distance field to compute per-point carving depth by bit geometry in real time. A 3D simulation replays the exact G-code motion before any real cutting — full pre-flight on the machine.
Internal project / Source not published