Open to senior AI & platform engineering roles
Building intelligent systems. Containing the agents that run them.
Thirteen years shipping production software. Now building the infrastructure that keeps autonomous agents contained, verified and affordable.
Systems, not demos.
Three pieces of the same argument: an autonomous agent should be contained by structure, not by instruction — and the containment should be something you can check from outside the agent.
Agent Egress Proxy — a fail-closed perimeter for outbound AI traffic
Every request an agent sends to a model vendor is redacted, metered and logged before a single byte leaves the machine.
Grit — a policy gateway for MCP tool calls
A tool with no declared policy is denied, never defaulted. Every path is resolved before it is checked. Anything that may write is snapshotted first.
ADLC — adversarial verification judged by the filesystem, not the agent
Generate hostile variants of a tool call, snapshot before and after, and judge the diff against a declared expectation. Never read what the tool said happened.
An autonomous agent, contained.
Every agent action passes through five independent checks. Scroll through them — each one is a real, separately tested component, and none of them trusts the others.
- 01
Gate
Agent OS decides whether this agent may act at all — on this target, with this budget, right now. Spend, external communications, production changes and anything with legal consequence always stop for a human.
- 02
Contain
Grit checks the tool call against a declared policy. Undeclared tools are denied, every path is resolved before it is compared, and anything that may write is snapshotted first.
- 03
Egress
The egress proxy redacts PII, meters cost, and only then forwards — so nothing unredacted is ever measured, logged or sent. A vendor outage becomes a fast refusal, not a hang.
- 04
Verify
ADLC judges what actually changed on disk against what was declared. It never reads the tool's output or the agent's account of itself — the filesystem is the witness.
- 05
Audit
Every decision lands as structured, append-only records — what was refused, what was redacted, what it cost — built to be queried, not merely tailed.
Let's build something
Shipping agents that have to be trusted?
I'm open to senior ai & platform engineering roles. If you're hiring or collaborating, I'd love to hear about it.