AK

XVII The Tinkerer

An engraved tarot plate: Arya Kavian holding a laptop, between a starry night sky and a storm cloud, surrounded by books, crystals and foliage.

Arya Kavian

Software engineer · tinkerer · researcher

Curious about what happens underneath.

I build software, take it apart, and try to work out why it held together in the first place.

  • Web
  • AI
  • Security
  • Systems
I

The character sheet

Who is holding the laptop

I'm a software engineer interested in the space between building things and understanding them. My work runs through web development, backend systems, infrastructure, AI and security — usually because something wouldn't stop bothering me.

Outside of code I'm drawn to things with character: old cars, photography, mechanical objects, and the occasional card trick.

Different subjects, same question. How does it work?

Method

  1. Build it.
  2. Understand it.
  3. Break it.
  4. Secure it.

Attributes

Class
Software engineer
Subclass
Tinkerer / researcher
Location
Iran
Domains
Web · AI · Security · Systems
Currently
Probably debugging something
Stack
Too many things
Weakness
Interesting problems
II

The four suits

Tools, not identity

Everything I work with falls into one of four piles. The pile matters more than the logo.

III

Things I built

Each one started as a question

I needed something. So I built it. The interesting part was usually somewhere in the middle.

2025

CLI TOTP Tool

I needed a CLI TOTP client so I built one.

A secure, cross-platform TOTP manager built in Go for generating and managing 2FA codes directly from the command line. Features encrypted secret storage using AES-256-GCM, password-based protection, and both CLI and interactive modes.

2025

n8n Telegram Client Trigger

Why n8n only supports telegram bots?

An n8n-powered Telegram automation bot that connects Telegram interactions with APIs and automated workflows. Designed as a modular, event-driven system for streamlining tasks and integrating external services.

IV

Things I wondered about

Published work
2024 EASE 2024 · SECUTE

LLM Security Guard for Code

If a language model can write software, can it also help secure the software it writes?

A framework that puts security analysis between the model and the developer: generated code is passed through static analysers, and the findings are fed back to the model so the next revision is measurably safer than the first.

The practical question underneath it: as more code is written by models, who is reading it?

V

The codex

Notes and long rabbit holes

Notes from things I couldn't stop wondering about.

VI

Outside the terminal

Optional, and better that way

Cars. Cameras. Machines. Things with interesting mechanisms.

Nothing developed yet. Come back after the next roll.

VII

Correspondence

Slow but reliable

Working on something strange, technical, or both? I read everything.

Write to me

Go on. It's not a real trick.