Engineering essays.
Deep-dives on AI code review, multi-agent architecture, and the craft of shipping reliable software at speed.
July 18, 2026SecurityPath Traversal in File Uploads: The ../../etc/passwd Diff Mesrai Flagged
Real PR: `path.join` does not prevent traversal. Mesrai's catch, the `../../etc/passwd` attack, and the basename + containment fix. CWE-22.
9 min read· Mesrai Team
July 17, 2026SecurityCommand Injection via child_process.exec: A Mesrai Catch
Real PR catch: `child_process.exec` runs through /bin/sh — shell metacharacters in user input mean RCE. Mesrai's flag, the attack, the execFile fix. CWE-78.
9 min read· Mesrai Team
July 17, 2026SecurityNoSQL Injection in MongoDB Queries: How Mesrai Spots $where Abuse
Real PR walkthrough: MongoDB `$where` with user input is server-side JS execution. Mesrai's review comment, the attack, the fix — CWE-943 in detail.
9 min read· Mesrai Team
July 16, 2026Case StudiesMesrai at a US Series B: 6-Month Adoption Retrospective
Mesrai at a US Series B fintech — six-month adoption retrospective. What worked, what didn't, what they'd do differently.
9 min read· Mesrai Team
July 16, 2026Case StudiesFrom 30-Day Review Cycles to 4 Hours: A Healthcare Team's Story
Healthcare team's story: from 30-day review cycles to 4 hours with Mesrai — HIPAA-safe, BYOK on regional Anthropic, full case study.
9 min read· Mesrai Team
July 15, 2026Case StudiesSolo Founder + Mesrai: A Year of One-Person Engineering
Solo founder + Mesrai — a year of one-person engineering. What changed when AI review became the only other reviewer on every PR.
9 min read· Mesrai Team
July 15, 2026Case StudiesOpen-Source Maintainer Story: AI Review for 1,000+ Contributors
Open-source maintainer story: how a 1000+ contributor project uses Mesrai to handle PR volume without burning out maintainers.
9 min read· Mesrai Team
July 14, 2026Case StudiesHow a 100-Engineer Fintech Caught 12 Prod Bugs in Week 1
How a 100-engineer fintech caught 12 production-bound bugs in week one with Mesrai. Anonymized case study with severity breakdown.
9 min read· Mesrai Team
July 14, 2026SecurityRBI Data Localisation + AI Tools: Compliance Checklist
RBI data localisation + AI tools — the compliance checklist financial services teams need before signing any AI code review provider in India.
9 min read· Mesrai Team
July 13, 2026Case StudiesCode Review at Scale: Bangalore, Hyderabad, Pune Engineering Hubs
Code review at scale across India's engineering hubs — Bangalore, Hyderabad, Pune. How distributed teams use AI review to align on quality.
9 min read· Mesrai Team
July 13, 2026Engineering CultureIndia-First SaaS: Why We Built Mesrai for the Local Market
Why we built Mesrai India-first — INR billing, GST, DPDP, local payment rails. The case for India-first SaaS in the AI code review category.
8 min read· Mesrai Team
July 12, 2026Engineering CultureTDS Compliance for SaaS Subscriptions: A CFO's Guide
TDS compliance for SaaS subscriptions in India — the rates, the exceptions, the foreign vendor problem, and clean filings for CFOs in 2026.
8 min read· Mesrai Team