Architect • Author • Builder
Gunjan Sharma
Distributed Systems & Platform Engineer
I design and operate reliable, scalable, and secure software systems. Built production platforms handling ₹100CR+ in digital asset transactions across cloud and blockchain infrastructure. Focused on Distributed Systems, Reliability, Cloud, Security, and AI-Native Engineering. 8× Technical Author • Open Source Builder.
The Library
Essays, engineering notes, projects, and what I'm reading.
What you'll find here
Blogs
Long-form essays, system design deep-dives, and engineering opinions.
Projects
Engineering projects I've built — what I made, why, and what I learned.
Notes
Rough ideas, short essays, and a digital garden of half-baked thoughts.
Papershelf
Research papers I've read — with my commentary and key takeaways.
Bookshelf
Books I've read, am reading, or want to read — with short notes.
Podcasts
Audio conversations on distributed systems, security, and building reliable software.
Videos
Conference talks, YouTube sessions, and technical walkthroughs.
Open Source Architecture
I've architected and contributed to 10+ open-source projects.
hmac_auth_builder (Dart/Flutter Runtime)
GitHubHMAC-based request signing for Dart and Flutter — secure API authentication and webhook verification
hmac-auth-builder (NodeJS/Javascript Runtime)
GitHubEnterprise-Grade HMAC Signature Generation for API Authentication in Node.js and JavaScript
Flutter Simple Contact
GitHubLightweight Flutter package (~2KB) for fast and reliable contact extraction with zero third-party dependencies
global_ui_overlay
GitHubLightweight production-ready Flutter package to display global overlay widgets with precise positioning, scroll-aware effects, and lifecycle callbacks
Published Works
My books and research papers spanning distributed systems and security.
Matrix of Thought — Cognitive Fallacies and Biases of Human Brain
A deep dive into over 60 cognitive biases and mental fallacies that shape human decision-making. Ideal for curious minds who want to understand why smart people make irrational choices — and how to think more clearly.
NodeJS and Asynchronous Backend - Rapid API Development Guide with NodeJS
A comprehensive guide to building dynamic and engaging web applications with NodeJS. Covers core concepts, best practices, and advanced techniques including Express, Testing, Authorization, Authentication, and performance optimization.
Thinking in React - Beginner friendly In-depth guide for React Mastery
A beginner-friendly, in-depth guide to mastering React. Covers core concepts, best practices, and advanced techniques including state management, routing, forms, animation, and working with APIs to build complex and robust applications.
MongoDB For You & Me - Commonsense & Ultimate Guide of MongoDB Database
A comprehensive guide to MongoDB and NoSQL databases. Covers core concepts, best practices, and advanced techniques including documents, collections, security, performance optimizations, and building data-rich applications.
Going Type By Type - Typescript Mastery For Scalable Full Stack Development
A comprehensive journey through the world of TypeScript. Provides both theoretical knowledge and practical understanding of every key concept — from basics to advanced types, generics, decorators, and scalable full-stack development patterns.
The Asymmetric Threat Frontier: LLM-Augmented Exploitation, The Crisis of Early-Stage Startups, and Invariant-Driven Systems Defense
For decades, software security rested on an equilibrium of human cognitive parity: discovering and weaponizing zero-day logic flaws required roughly the same human cognitive intensity as designing defenses. The integration of Large Language Models (LLMs) and autonomous agentic loops into offensive workflows has broken this equilibrium. Today, a low-capital threat syndicate armed with recursive LLM feedback loops can probe, interpret application error topologies, synthesize evasive payloads, and iterate at machine speed, wielding the offensive capability of an elite nation-state team. Concurrently, early-stage seed to Series-A startups are exposing unprecedented digital attack surfaces without the capital to hire dedicated security teams. This paper presents a first-principles analysis of this breakdown through the lens of thermodynamics and systems theory. It analyzes the specific vulnerability vectors across modern full-stack architectures (Flutter mobile client-side, Next.js web runtimes, MySQL databases, and Cloud infrastructure) and outlines an architectural defense paradigm rooted in mathematical invariants and zero-trust cryptography rather than reactive perimeter patching. Core Architectural Invariants Covered: - Hybrid Envelope Encryption (AES-256 with DEK/KEK hierarchy) paired with Deterministic Blind Indexing (HMAC-SHA256 with pepper key) for searchable encrypted storage. - Mathematical Device-Bound Session Signatures offering 2^-256 replay resistance. - Decoupled, non-blocking telemetry pipelines operating as an active immune system (validated on 12M+ production events). - Hardware-backed client attestation and strict zero-trust parameterization.
Matrix of Thought — Cognitive Fallacies and Biases of Human Brain
A deep dive into over 60 cognitive biases and mental fallacies that shape human decision-making. Ideal for curious minds who want to understand why smart people make irrational choices — and how to think more clearly.
NodeJS and Asynchronous Backend - Rapid API Development Guide with NodeJS
A comprehensive guide to building dynamic and engaging web applications with NodeJS. Covers core concepts, best practices, and advanced techniques including Express, Testing, Authorization, Authentication, and performance optimization.
Thinking in React - Beginner friendly In-depth guide for React Mastery
A beginner-friendly, in-depth guide to mastering React. Covers core concepts, best practices, and advanced techniques including state management, routing, forms, animation, and working with APIs to build complex and robust applications.
MongoDB For You & Me - Commonsense & Ultimate Guide of MongoDB Database
A comprehensive guide to MongoDB and NoSQL databases. Covers core concepts, best practices, and advanced techniques including documents, collections, security, performance optimizations, and building data-rich applications.
Going Type By Type - Typescript Mastery For Scalable Full Stack Development
A comprehensive journey through the world of TypeScript. Provides both theoretical knowledge and practical understanding of every key concept — from basics to advanced types, generics, decorators, and scalable full-stack development patterns.
The Asymmetric Threat Frontier: LLM-Augmented Exploitation, The Crisis of Early-Stage Startups, and Invariant-Driven Systems Defense
For decades, software security rested on an equilibrium of human cognitive parity: discovering and weaponizing zero-day logic flaws required roughly the same human cognitive intensity as designing defenses. The integration of Large Language Models (LLMs) and autonomous agentic loops into offensive workflows has broken this equilibrium. Today, a low-capital threat syndicate armed with recursive LLM feedback loops can probe, interpret application error topologies, synthesize evasive payloads, and iterate at machine speed, wielding the offensive capability of an elite nation-state team. Concurrently, early-stage seed to Series-A startups are exposing unprecedented digital attack surfaces without the capital to hire dedicated security teams. This paper presents a first-principles analysis of this breakdown through the lens of thermodynamics and systems theory. It analyzes the specific vulnerability vectors across modern full-stack architectures (Flutter mobile client-side, Next.js web runtimes, MySQL databases, and Cloud infrastructure) and outlines an architectural defense paradigm rooted in mathematical invariants and zero-trust cryptography rather than reactive perimeter patching. Core Architectural Invariants Covered: - Hybrid Envelope Encryption (AES-256 with DEK/KEK hierarchy) paired with Deterministic Blind Indexing (HMAC-SHA256 with pepper key) for searchable encrypted storage. - Mathematical Device-Bound Session Signatures offering 2^-256 replay resistance. - Decoupled, non-blocking telemetry pipelines operating as an active immune system (validated on 12M+ production events). - Hardware-backed client attestation and strict zero-trust parameterization.
Open for Consulting & Advisory
Security engineering, distributed systems design, blockchain development, and cloud infrastructure — see how I work and what I take on.